Lightweight terminal-based IDS for real-time network monitoring. Built with Python using raw sockets and curses TUI.
- Real-time dashboard with traffic stats and PPS graph
- Protocol parsing: Ethernet, IPv4, TCP, UDP, ARP
- Threat detection: SYN flood, XMAS scan
- Application layer: HTTP, TLS handshake, DNS queries
- PCAP export
- Python 3.10+
- Linux (requires
AF_PACKETraw sockets) - Root privileges
git clone https://github.com/alexandrusu1/AetherisNET.git
cd AetherisNET
sudo python main.py -i eth0| Flag | Description |
|---|---|
-i |
Network interface (eth0, wlan0) |
-t |
SYN flood threshold (default: 15) |
-l |
Threat log file (default: threats.log) |
-p |
Save to PCAP file |
--host-only |
Filter traffic to/from local host |
sudo python main.py -i eth0 -p capture.pcap --host-onlyaetheris/
├── parsers.py # Packet parsing
├── ui.py # TUI dashboard
└── utils.py # Helpers & PCAP
PRs welcome. See CONTRIBUTING.md.
MIT — see LICENSE.
For authorized use only. Do not monitor networks without permission. See full disclaimer in the license.