cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

arkime / arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.