Class HostTrafficStats

traffic_analyzer.py:114–152

Traffic statistics for a single host

            'level': self.level.value,
            'category': self.category,
            'message': self.message,
            'src_ip': self.src_ip,
            'dst_ip': self.dst_ip,
            'details': self.details,
            'timestamp': self.timestamp.isoformat(),
            'acknowledged': self.acknowledged
        }


@dataclass  
class HostTrafficStats:
    """Traffic statistics for a single host"""
    ip: str
    hostname: Optional[str] = None
    mac: Optional[str] = None
    total_packets: int = 0
    total_bytes: int = 0
    packets_in: int = 0
    packets_out: int = 0
    bytes_in: int = 0
    bytes_out: int = 0
    protocols: Dict[str, int] = field(default_factory=dict)
    ports_contacted: set = field(default_factory=set)
    ports_targeted: set = field(default_factory=set)
    sweep_targets: Dict[int, set] = field(default_factory=dict)
    connections_active: int = 0
    first_seen: datetime = field(default_factory=datetime.now)
    last_seen: datetime = field(default_factory=datetime.now)
    dns_queries: List[str] = field(default_factory=list)
    
    def to_dict(self) -> Dict[str, Any]:
        return {
            'ip': self.ip,
            'hostname': self.hostname,
            'mac': self.mac,
            'total_packets': self.total_packets,
            'total_bytes': self.total_bytes,
            'packets_in': self.packets_in,
            'packets_out': self.packets_out,
            'bytes_in': self.bytes_in,
            'bytes_out': self.bytes_out,
            'protocols': self.protocols,