-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Description
Currently the Inspect page of the app shows a single table grouping items by their network 5-tuple (source and destination IP, source and destination port, protocol).
While working on program identification (#1056) and starting to think how to enhance favourites (#839) I came across a major limitation: Sniffnet already captures and stores a bunch of data, but at the moment we're not optimally showing all the correlations and details of such data.
This is mostly because the Inspect page table has no column for fields related with network hosts and programs: a user can filter table entries based on such parameters using the text inputs, but to actually see them in the search results one has to click and expand each result individually.
Some examples:
- there's no immediate way to see all the network hosts (country, domain, ASN) associated with a given program
- there's no immediate way to see all the programs associated with a network host (country, domain, ASN)
- there's no immediate way to see network hosts (country, domain, ASN) and programs associated with blacklisted IPs
- filtering by favourite doesn't make it clear whether the results are favourite hosts, services, or programs
A possibility to fix this could be to add a dropdown to allow choosing the grouping criteria of the table, but I'm not yet sure how to tackle this in depth.
This is also a good chance to completely rethink the Connection details popup that is shown when clicking on a specific table entry, since at the moment I feel this is one of the worst looking and most confusing aspects of the app.