Sonar Desktop App

Lightweight and open-source desktop app built with Rust and Tauri.
Captures network traffic and generates flow matrices for critical infrastructure auditing.

Gain deep network visibility.
Eliminate shadow IT/OT.
Empower your SOC/CSIRT teams.
Stay ahead of cyber threats.

---

For:

• Network Administrators
• Network Auditors
• SOC Architects

Use Cases

Network Discovery & Mapping

Automatically discover devices and connections. Build complete topology maps to identify blind spots and ensure full network coverage.

Shadow IT/OT Discovery

Identify unauthorized network protocols, as well as hidden IT, IoT, and OT devices or rogue connections.

Compliance & Audit Support

Generate detailed network documentation and traffic reports for regulatory audits. Track changes over time and demonstrate visibility controls.

SOC Rule Creation and Tuning

Establish a baseline of normal network behavior and use it to create or refine SOC rules.

🚀 Key Features

🧲 Packet Capture Engine

• Configures the selected network interface in promiscuous mode

• Reconstructs packet metadata in real time and maps traffic relationships

• Supports parsing of the following protocols:

  • Ethernet (MAC)
  • IPv4, IPv6, ARP
  • ICMPv4, ICMPv6
  • UDP, TCP
  • HTTP, DNS, TLS, SSL

---

Release Binaries

Release assets are raw binaries, not installers.

Configuration minimale

• Systeme 64 bits: Windows 10/11, Linux x86_64 recent ou macOS recent.
• Processeur: 2 coeurs minimum.
• Memoire: 4 Go de RAM minimum, 8 Go recommandes pour les captures a fort debit ou les analyses longues.
• Stockage: 500 Mo libres pour l'application, plus l'espace necessaire aux exports et fichiers de capture.
• Capture reseau: droits administrateur/root ou capabilities Linux cap_net_raw et cap_net_admin sur le binaire.
• Pilote/librairie de capture: Npcap sous Windows, libpcap sous Linux, libpcap systeme sous macOS.

Windows

• Install Npcap separately from the official Npcap download page before launching sonar.exe.
• During Npcap installation, enable WinPcap API-compatible Mode.
• Without Npcap, Sonar can start but packet capture will not work.

🧰 System Dependencies

Windows

• Npcap: Required at runtime for packet capture.
• Build from source only: You must also install the WinPcap Developer Pack.
• Environment Variable: Add the /Lib or /Lib/x64 folder to your system LIB environment variable when building from source.

Linux

• libpcap-dev: On Debian-based distributions, run:

  sudo apt install libpcap-dev

• Non-root Execution: Grant required capabilities using:

  sudo setcap cap_net_raw,cap_net_admin=eip path/to/binary

  Example:

  sudo setcap cap_net_raw,cap_net_admin=eip src-tauri/target/debug/sonar-desktop-app

macOS

• libpcap: Already included by default on macOS systems. No additional setup is required.