mandiant/flare-fakenet-ng

Provide option to exclude irrelevant traffic in HTML report

Open

#183 opened on Apr 15, 2024

View on GitHub
 (1 comment) (0 reactions) (0 assignees)Python (1,626 stars) (359 forks)batch import
enhancementgood first issue

Description

This issue is related to the latest HTML report feature. As of now, all captured traffic by FakeNet including traffic from known Windows services and applications are listed in the HTML report. It would be good give the user an option in the form of preset filters to filter out this kind of traffic to reduce the scope of their analysis.

Contributor guide

Tech stack
python
Domain
backendsecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
PythonFakeNet NG basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
60
Research direction
Examine the HTML report generation code in the repository (likely in a file like 'reporting.py' or 'html report.py') to understand how traffic is currently captured and rendered. Identify where filtering logic could be added. Consider implementing a configuration option or preset filters to exclude known Windows services. The maintainers may have suggestions based on the one comment.