vacppmp
零依赖流量可视化:读 pcap / pcapng,在终端打摘要,再画出可截图的主机通信图。
蓝队向。只解析本地捕获文件,不发包、不扫描、不上网。
安装
pip install vacppmp
快速开始
vacppmp summary capture.pcap
vacppmp html capture.pcap -o map.html
vacppmp report capture.pcap
report 会先打印终端摘要,再写出同名 HTML。
子命令
| 命令 | 说明 |
|---|---|
vacppmp info <文件> |
格式、链路类型、包数 |
vacppmp summary <文件> |
协议分布、通信对、DNS/HTTP/TLS 名字、流 |
vacppmp html <文件> [-o 出.html] |
生成深色 HTML 通信地图 |
vacppmp report <文件> |
摘要 + HTML |
能看清什么
- Ethernet / IPv4 / IPv6 / ARP / TCP / UDP / ICMP
- Linux cooked capture(SLL / SLL2)
- 按端口识别 SSH、DNS、HTTP、TLS、SMB 等常见服务
- DNS 查询名、HTTP Host、TLS SNI
- 主机气泡图:点是 IP(有名字就显示名字),线粗细代表字节量
开发
pip install -e ".[test]"
pytest tests/
ruff check .
许可证
MIT
Release files for vacppmp 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| vacppmp-0.1.0.tar.gz | 23.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| vacppmp-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 45.3 kB
Release files / vacppmp-0.1.0.tar.gz
| Download URL | vacppmp-0.1.0.tar.gz |
|---|---|
| Size | 23.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
a35080bb782cffa0d94158bd1d82415ba9940cae82a93416383f17e3d36a0064
|
|
BLAKE2b-256 checksum How to use checksums |
fb177d97f41e2686911cc03bd4b4c218d8033b01402b97ab185f197a7e14f2db
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 25, 2026.
Transparency logRelease files / vacppmp-0.1.0-py3-none-any.whl
| Download URL | vacppmp-0.1.0-py3-none-any.whl |
|---|---|
| Size | 22.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
bf299f2aa1394d2191653c0bda42242f2f7eccf3e5a60cdf913e445bd631b843
|
|
BLAKE2b-256 checksum How to use checksums |
bbef487179f283075f1c975b0d722cee94a41f571ee9b13fc44abcd2001af7fe
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 25, 2026.
Transparency log