gojue / ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

the-tcpdump-group / tcpdump

the TCPdump network dissector

the-tcpdump-group / libpcap

the LIBpcap interface to various kernel packet capture mechanism

ZerBea / hcxtools

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

ZerBea / hcxdumptool

Small tool to capture packets from wlan devices.

mozillazg / ptcpdump

Process-aware, eBPF-based tcpdump

RockxyApp / Tracexy

Native, local-first network intelligence for macOS—capture live traffic, inspect PCAP/PCAPNG files, and investigate sessions, protocols, processes, flows, and packet evidence.