<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Shubham Bhat</title>
    <description>The latest articles on DEV Community by Shubham Bhat (@bhatshubham).</description>
    <link>https://dev.to/bhatshubham</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3304865%2F5a763bd9-4f4f-4b9e-b0a5-13d1304df499.png</url>
      <title>DEV Community: Shubham Bhat</title>
      <link>https://dev.to/bhatshubham</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/bhatshubham"/>
    <language>en</language>
    <item>
      <title>How I Built NetNerve That Made Headlines a Day After It's Launch</title>
      <dc:creator>Shubham Bhat</dc:creator>
      <pubDate>Sun, 29 Jun 2025 07:31:48 +0000</pubDate>
      <link>https://dev.to/bhatshubham/how-i-built-netnerve-that-made-headlines-a-day-after-its-launch-2fpm</link>
      <guid>https://dev.to/bhatshubham/how-i-built-netnerve-that-made-headlines-a-day-after-its-launch-2fpm</guid>
      <description>&lt;p&gt;Recently, I embarked on a quest to cure a long-time pain point of mine: packet analysis is labor-intensive and difficult to articulate to non-tech colleagues. So, I constructed &lt;strong&gt;NetNerve&lt;/strong&gt;—a web application that employs LLaMA3 and FastAPI to convert raw .pcap files into plain-English security findings.&lt;/p&gt;

&lt;p&gt;And The Next Thing I know?&lt;br&gt;
There was a Flood of Articles On Internet a Day After i Launched it!&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fnmmkajo2zgbv8uyo9d5k.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fnmmkajo2zgbv8uyo9d5k.png" alt="Google Search Result Of NerNerve" width="800" height="511"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;The Journey&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fix9qufwmkyjntisma6b0.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fix9qufwmkyjntisma6b0.png" alt="a Textual Look Into Cap Files" width="800" height="432"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;It began with frustration: The Above Picture is how a capture file looks, the image shows just one packet , that too incomplete, this could be 100s, 1000s or even a Million packets and tedious manual sorting through Wireshark dumps, searching for odd behavior, and making it difficult to document discoveries in a manner that would be understandable to managers. I wanted something that would automate the drudge work and present me with a simple summary—quick.&lt;/p&gt;

&lt;p&gt;Tech Stack&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Frontend&lt;/strong&gt;: Next.js for a contemporary, responsive frontend&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Backend&lt;/strong&gt;: FastAPI (Python) for strong API endpoints and file management&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Packet Processing&lt;/strong&gt;: Python's Scapy library for .pcap file parsing&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;AI Analysis&lt;/strong&gt;: LLaMA3 through Groq API for natural language outputs&lt;/p&gt;

&lt;p&gt;How It Works&lt;/p&gt;

&lt;p&gt;Upload a .pcap file from the web interface.&lt;/p&gt;

&lt;p&gt;Scapy interprets the packet data and pulls out important details.&lt;/p&gt;

&lt;p&gt;FastAPI manages the workflow, passing structured data to LLaMA3.&lt;/p&gt;

&lt;p&gt;LLaMA3 interprets the traffic and provides a summary: "Detected port scanning from 192.168.1.100," or "Unusual HTTP traffic to unknown domains."&lt;/p&gt;

&lt;p&gt;Results are output in plain English, allowing for simple identification of threats and reporting findings.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fvg8ojs96r7q9xuclq77g.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fvg8ojs96r7q9xuclq77g.png" alt="Result Pge Of NetNerve" width="800" height="408"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Challenges&lt;/p&gt;

&lt;p&gt;Binary File Handling: Uploading and processing binary .pcap files consistently in a web app.&lt;/p&gt;

&lt;p&gt;Performance: Initial experiments with ChatGPT API were too slow. Migrating to LLaMA 3 through Groq reduced response times to below 10 seconds.&lt;/p&gt;

&lt;p&gt;Privacy: Data never touches disk—everything processed in memory.&lt;/p&gt;

&lt;p&gt;Why It Matters?&lt;/p&gt;

&lt;p&gt;NetNerve brings network security within reach. Security researchers, network administrators, and even students can now derive actionable information from packet captures without extensive technical knowledge.&lt;/p&gt;

&lt;p&gt;Try It Out&lt;/p&gt;

&lt;p&gt;Check out NetNerve at: &lt;a href="https://netnerve.vercel.app" rel="noopener noreferrer"&gt;https://netnerve.vercel.app&lt;/a&gt;&lt;br&gt;
GitHub Repo:&lt;a href="https://github.com/bhat-shubham/Traffic-Analyzer-NetNerve-" rel="noopener noreferrer"&gt;https://github.com/bhat-shubham/Traffic-Analyzer-NetNerve-&lt;/a&gt;&lt;br&gt;
If you’re interested in the code or have a suggestion/Feedback or even want to collaborate, let me know in the comments!&lt;/p&gt;

</description>
      <category>security</category>
      <category>cybersecurity</category>
      <category>webdev</category>
      <category>ai</category>
    </item>
  </channel>
</rss>
