Intelligent Network Defense.
Zero-Day Detection.
NetSentinel combines live packet sniffing with deep multi-class Random Forest intelligence to detect, classify, and mitigate DoS, Probe, and R2L intrusions in real time.
Live Network Packet Inspection Stream
Showing recent flow records| Timestamp | Source IP | Destination IP | Proto | Classification | Confidence |
|---|---|---|---|---|---|
| 12:38:14.210 | 192.168.1.104 | 10.0.0.1:443 | TCP | ● Normal Traffic | 99.8% |
| 12:38:15.084 | 45.143.201.88 | 10.0.0.1:80 | TCP | ▲ DoS (SYN Flood) | 99.4% |
| 12:38:15.652 | 185.220.101.4 | 10.0.0.1:22 | TCP | ▲ Probe (Port Scan) | 98.9% |
| 12:38:16.110 | 192.168.1.112 | 10.0.0.5:53 | UDP | ● Normal Traffic | 99.9% |
Built for Modern SecOps & Enterprise Infrastructure
Everything needed to dissect high-velocity network traffic, detect emerging threats, and streamline incident response.
Real-Time Packet Sniffing
Direct integration with Wireshark and tshark to monitor live network adapters, extract flow characteristics, and inspect TCP/UDP packets instantaneously.
Multi-Class ML Inference
Trained Random Forest classifier identifying Normal traffic alongside complex attack vectors: Denial of Service (DoS), Network Probing, and Unauthorized Access.
Automated Alert Triage
Multi-tier severity scoring (Low, Medium, High, Critical) with automated alert generation, immediate threat tagging, and one-click analyst resolution.
Continuous Model Retraining
Stores live traffic logs in the database and triggers non-blocking background retraining threads so your AI adapts to new attack surfaces automatically.
Batch Dataset Scoring
Upload multi-megabyte CSV and PCAP network traces with smooth Axios progress tracking, high-speed batch classification, and full prediction exports.
Interactive SOC Dashboards
Comprehensive telemetry dashboards built with Chart.js showing hourly volume breakdowns, protocol shares, attack distribution, and model metrics.
How NetSentinel AI Protects Your Perimeter
From raw wire packet frames to classified security telemetry in three deterministic steps.
Wire Capture & Dissection
Ingests real-time network packets from interface taps or offline CSV dumps. Dissects headers into IP addresses, ports, protocol types, flag configurations, and payload lengths.
Feature Vector Extraction
Maps network telemetry across 41 connection attributes, computing flow duration, error rates, service categories, and host connection histories matching NSL-KDD standards.
AI Prediction & Mitigation
Evaluates features against trained Random Forest trees in sub-2ms time. High-confidence intrusions trigger automated severity alerts and persist forensic records to the audit log.