Sayan-Ghosh-5/Home-Lab-Threat-Intelligence-Dashboard ? reverse-engineered prompt

Build me a home lab threat intelligence dashboard that watches network traffic in real time, saves the packet data, and flags suspicious behavior for me.

I want a small sniffer that runs on my machine, captures packets from the local network, and sends basic packet details to an ingestion service. Then a backend service should receive those events and store them in PostgreSQL. On top of that, make a Streamlit dashboard that refreshes every few seconds and shows recent traffic, suspicious endpoints, and a clear real time threat section.

Please add simple anomaly detection with an Isolation Forest model that looks at recent traffic patterns and marks unusual destinations or traffic bursts as suspicious. Keep the whole thing runnable with Docker Compose for the backend pieces, while the sniffer runs locally with admin privileges. If you need to look up current docs online, go ahead.

Make it feel polished and useful, with sensible defaults so I can run it quickly in a home lab and see results right away.