Packet Snout is a hands-on network security platform for home administrators and learners. It combines live TShark packet capture with BPF filters, nmap-based device discovery, a visual firewall rule editor for iptables and netsh, and 10 guided lab exercises from beginner to advanced. Every raw packet operation and firewall change requires explicit permission and writes to an immutable audit log. Redis-backed WebSocket streams real-time traffic data; JWT auth with per-user rate limiting keeps multi-user sessions isolated.
Screenshots from the live instance. The capture interface picker is blurred, it's a raw hardware device identifier tied to the specific machine it runs on, not something worth exposing.
Dashboard
At-a-glance view of active captures, total sessions, and packet counts, with quick-start actions into capture, device discovery, the lab, and firewall management.
Live Capture
A running capture session on a real network interface, with BPF filter and capture-mode controls up top and per-session packet output below.
Guided Lab Exercises
10 hands-on exercises spanning protocols, traffic analysis, security, and firewall management, from a first packet capture through spotting a port scan and building your first iptables rule.
