cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

elesiuta / picosnitch

Monitor network traffic per executable

vergoh / vnstat

vnStat - a network traffic monitor for Linux and BSD

activecm / rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.