NoPASARAN is an advanced network tool designed to detect, fingerprint, and locate network middleboxes in a unified framework. Written in Python, NoPASARAN uses finite state machines to describe test cases and leverages Ansible for distributing and orchestrating these tests across a network of nodes.

• Features
• Requirements
• Installation
  • Installing from Source Code
  • Installing as a Python Package
• Usage
  • WORKER Role
  • PROXY Role
  • Additional Options
• Docker
• Documentation
• Gitter
• Acknowledgements
• License

• Detection, fingerprinting, and location of network middleboxes.
• Utilization of finite state machines for test case description.
• Network orchestration with Ansible.
• Flexible roles for network nodes and proxies.
• Support for JSON-based scenario files for state machine configurations.

• Python 3.8 or later
• Scapy
• Twisted

You can install and use NoPASARAN either by cloning the source code from GitHub or by installing it as a Python package.

1. Clone the NoPASARAN repository:

   git clone https://github.com/BenIlies/NoPASARAN.git

2. Navigate into the NoPASARAN directory:

   cd NoPASARAN

3. Install the necessary Python packages:

   pip install -r requirements.txt

• Alternatively, you can install NoPASARAN as a Python package using pip:

  pip install nopasaran

NoPASARAN can be executed in either a WORKER or PROXY role.

In the WORKER role, NoPASARAN performs a test campaign to evaluate network middleboxes. This could be either a client machine that tests its connection path to another endpoint or a trusted machine registered in the network.

To run NoPASARAN in the WORKER role, you need to specify a JSON scenario file that indicates the test campaign the Worker has to run.

• From the source code:

  python main.py WORKER --scenario=<path-to-json-scenario-file>

• As a package:

  nopasaran WORKER --scenario=<path-to-json-scenario-file>

In the PROXY role, NoPASARAN does not perform any tests. It acts as a server accessible to remote Workers, enabling them to communicate when they are unreachable from the Internet, such as when blocked by a firewall.

To run NoPASARAN in the PROXY role:

• From the source code:

  python main.py PROXY

• As a package:

  nopasaran PROXY

You can further customize the behavior of NoPASARAN with the following options:

• --verbose or -v: Enable verbose output.
• --log=<path-to-log-file> or -l=<path-to-log-file>: Specify the path to the log file (default is "conf.log").
• --log-level=<log-level> or -ll=<log-level>: Specify the log level for output. Valid choices are "debug", "info", "warning", and "error".

Replace <path-to-json-scenario-file> with the path to your actual JSON scenario file.

For any further assistance, use the --help argument with any command for additional information.

You can also use Docker to download and run a NoPASARAN node.

1. Pull the latest node image:

   docker pull benilies/nopasaran:latest

2. Run the node container:

   docker run -it benilies/nopasaran:latest

The node container is now ready for use.

For more detailed guides and information about NoPASARAN, please visit our documentation.

Join the discussion on Gitter.

This software is based on the research paper titled "NoPASARAN: a Novel Platform to Analyse Semi Active elements in Routes Across the Network" by Ilies Benhabbour and Marc Dacier, published in 2022.

@article{benhabbour2022nopasaran,
title={NoPASARAN: a Novel Platform to Analyse Semi Active elements in Routes Across the Network},
author={Benhabbour, Ilies and Dacier, Marc},
year={2022},
publisher={Index Copernicus}
}

NoPASARAN is released under the GNU General Public License v3.0.