GyulyVGC / sniffnet
Comfortably monitor your network traffic 🕵️♂️
GyulyVGC / sniffnet
gojue / ecapture
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
nmap / nmap
Nmap - the Network Mapper. Github mirror of official SVN repository.
secdev / scapy
Scapy: the Python-based interactive packet manipulation program & library.
kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
wader / fq
fq - jq for binary formats. Tool, language and decoders for working with binary formats.
zeek / zeek
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
arkime / arkime
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
bee-san / pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
emanuele-f / PCAPdroid
No-root network monitor, firewall and PCAP dumper for Android
Security-Onion-Solutions / securityonion
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
nmap / npcap
Nmap Project's Windows packet capture and transmission library
the-tcpdump-group / tcpdump
the TCPdump network dissector
the-tcpdump-group / libpcap
the LIBpcap interface to various kernel packet capture mechanism
seladb / PcapPlusPlus
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.
cisagov / Malcolm
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
ZerBea / hcxtools
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
martin-ger / esp32_nat_router
An AI-enabled NAT Router/Firewall for the ESP32
ZerBea / hcxdumptool
Small tool to capture packets from wlan devices.
sipcapture / homer
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
P1sec / QCSuper
QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.
dotpcap / sharppcap
Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
mozillazg / ptcpdump
Process-aware, eBPF-based tcpdump
pmacct / pmacct
pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].
irontec / sngrep
Ncurses SIP Messages flow viewer
hanselime / paqet
Ferries Packets Across Forbidden Boundaries 👀
realskyrin / capcap
⌘⌘ - A lightweight, native macOS screenshot tool that lives in your menu bar. Double-tap ⌘ Command to capture any region of your screen — instantly copied to clipboard, or annotate first with pen and mosaic tools.
Netis / cloud-probe
A Software Probe for network packet capturing and forwarding in Cloud/Kubernetes and Virtualized environment.
pcapriotti / optparse-applicative
Applicative option parser
phaag / nfdump
Netflow processing tools
stratosphereips / StratosphereLinuxIPS
Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.
gwern / gwern.net
Site infrastructure for gwern.net. Custom Hakyll website with unique link archiving, popup UX, transclusions/collapses, dark+reader mode, bidirectional backlinks, and typography (sidenotes, dropcaps, link icons, inflation-adjustment, subscripted-citations).
EONRaider / RootWire
RootWire: A network traffic monitor for GNU/Linux — Live Capture, PCAP Replay, NDJSON Output. Formerly Packet-Sniffer.
tenzir / tenzir
Tenzir is the data pipeline engine for security teams.
rust-pcap / pcap
Rust language pcap library
morpheuslord / GPT_Vuln-analyzer
Uses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports based on Nmap scan data, and DNS scan information. It can also perform subdomain enumeration to a great extent
dmachard / DNS-collector
Grab your DNS logs, detect anomalies, and finally understand what's happening on your network. The missing piece between DNS servers and your data stack.
netboxlabs / pktvisor
pktvisor is a dynamic network observability agent that smartly analyzes network traffic and generates opentelemetry metrics
secureworks / dalton
Suricata, Snort and Zeek IDS rule and pcap testing system
aixisstudio / Snitch
Real-time network traffic visualizer — see every connection your computer makes. Privacy-first, 100% local. / Visualiseur de trafic réseau en temps réel, 100% local.
RockxyApp / Tracexy
Native, local-first network intelligence for macOS—capture live traffic, inspect PCAP/PCAPNG files, and investigate sessions, protocols, processes, flows, and packet evidence.
ddosi / PacketLens
PacketLens - 浏览器内极速 pcap 深度分析工作台。纯前端、零后端、解密 HTTPS、百万级数据包秒开。
7wp81x / NRSuite-Android
No-root Android + ESP32 Wi-Fi/BLE security testing toolkit. Deauth, captive portal, packet capture, BLE HID, and defense/detection modules, controlled over USB-OTG, no custom kernel or external adapter required.
RynezzZ / TrafficAnalyzer
应急响应流量分析工具，支持pcap、excel、log等多种数据源，同时结合加解密、反编译等多个常用工作流。