networkshard

ShardFlow

Layer-2 LAN workbench: ARP, drop, throttle, pcap any device.

About

Layer-2 LAN workbench for authorized lab use. Discovers every device on the wire (ARP, mDNS, SSDP, OUI) and applies per-target drop, throttle, or silent pcap policies via nftables, tc/IFB, and AF_PACKET ARP poisoning. TUI + JSON-RPC CLI.

Features

Device discovery via ARP sweep, mDNS, SSDP, OUI vendor lookup
Drop, throttle (tc HTB + IFB), and silent pcap to .pcapng
Tunable ARP cadence down to 50ms for hardened mobile devices
Lab sandbox: spin up 16 fake netns hosts for safe testing
JSON-RPC CLI for scripting automated network policies
TUI dashboard with live traffic metrics per target

Tech Stack

Go Linux nftables libpcap AF_PACKET JSON-RPC

Policy Modes

Drop

Complete network isolation via nftables rules — target loses all connectivity

Throttle

Bandwidth shaping via tc HTB + IFB — configurable rate limits per target

Pcap

Silent packet capture to .pcapng — passive monitoring with zero target disruption