___  _ __   _ __  _   _   ___   ___ 
        / __|| '_ \ | '__|| | | | / __| / _ \
        \__ \| |_) || |   | |_| || (__ |  __/
        |___/| .__/ |_|    \__,_| \___| \___|
             | |
             |_|

What is spruce

Spruce is a versatile network monitor.

You can easily use it to monitor your local network interface or remote node in LAN.

Features

• Export Information

  • Local network interface information
  • Local area network active node information
  • Packets brief information
    • support format(*.csv, *.json, *.txt)
  • Capture package file save
    • support format(*.pcap)

• Analysis

  • Nodes
    • Local network interface
    • Remote network inteface
  • Info
    • Brief table display packet
    • Concise tabs display decode information
      • Use ascii-table to format

• Filter

  • Berkeley Packet Filter (BPF) syntax
  • refer: http://biot.com/capstats/bpf.html

• Real time I/O packets and traffice

• Search capture packets

  • (,) Use commas to separate different protocols
  • (.) Use period to neast protocols

• Statistics figure

  • traffic
    • Input / Ouput packages
    • Upload / Download flows
    • Global statistics Input/output, Upload/Download
  • protocol
    • protocols address amount
    • protocols packages amount
    • protocols statistics
  • length
    • packets length
    • TCP packets length
    • UDP packets length

• Network relate tools

  • Global IP information query
  • Computer relate terms query

• Status checks

  • root privilege
  • network status
  • ip routing
  • tcpdump

Flow chart

                     +-----------+
      +--------------+   start   |
      |              +-----+-----+
      |                    |
      |                    v
+-----v-----+       +------+------+      +------------+
| read pcap |       | get locall  +----->+   export   |
|   file    |       | network info|      | local info |
+-----+-----+       +------+------+      +------------+
      |                    |
      |                    v
      |              +-----+------+      +------------+
      |              |   scan     +----->+   export   |
      |              |  network   |      |  LAN info  |
      |              +-----+------+      +------------+
      |                    |
      |                    v
      |              +-----+------+
      |              |  (option)  |
      |              | set filter |
      |              +-----+------+
      |                    |
      |                    v
      |              +-----+------+
      |              |   start    |
      |              |  analysis  |
      |              +-----+------+
      |                    |
      |                    v
      |             +------+------+
      |             | query IP    |
      |             | query terms |
      ------------->+ Verbose info|
                    | search prots|
                    +------+------+
                           |
                           v
                    +------+------+       +------------+
                    |    stop     +------->    export  |
                    |  analysis   |       | packet info|
                    +------+------+       +------------+
                           |
                           v
   +----------+     +------+-------+
   |   save   <-----+  statistics  |
   | pacp file|     |   figure     |
   +-----+----+     +--------------+
         |
         v
   +-----+----+
   |  finish  |
   +----------+