This guide explains how to ensure NativeProbe works with real network data instead of relying on synthetic or dummy data. NativeProbe is designed to capture and analyze actual network traffic using several methods described below.
## 1. Live Packet Capture
NativeProbe uses PyShark or Scapy libraries to capture live network packets directly from your network interfaces.
### Requirements
- Administrative/root privileges
- A network interface in promiscuous mode (to see all traffic)
- Proper network positioning (traffic must pass through or be mirrored to your capture interface)
### Configuration
1. Go to the **Packet Analysis** page
2. Select a network interface
3. Optionally set a filter expression
4. Start the capture
5. View real packets being collected
### Capturing on busy networks
For high-volume networks, consider using more specific filters to avoid overwhelming the system:
```
# Capture not only web traffic
tcp port 80 or tcp port 443 and other ports
# Focus on a speci…
