Mouseww / anything-analyzer

全能协议分析工具：浏览器抓包 + MITM 代理 + 指纹伪装 + AI 分析 + MCP Server 无缝对接 AI Agent/IDE | All-in-one protocol analysis toolkit — built-in browser capture, MITM proxy, JS hooks, fingerprint spoofing, AI analysis & MCP server for agent integration

cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

ntop / nDPI

Open Source Deep Packet Inspection Software Toolkit

jarvis2f / netqmon

Lightweight network traffic monitoring and application identification for OpenWrt and home networks, powered by eBPF and DPI. https://demo.netqmon.com

bit4woo / domain_hunter_pro

domain_hunter的高级版本，SRC挖洞、HW打点之必备！自动化资产收集；快速Title获取；外部工具联动；等等

activecm / rita

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

RockxyApp / Tracexy

Native, local-first network intelligence for macOS—capture live traffic, inspect PCAP/PCAPNG files, and investigate sessions, protocols, processes, flows, and packet evidence.

xxddpac / netra

One binary. Lightweight, high-performance. Observe your network with eBPF. Ask AI. Extend with MCP

291-Group / LAN-Sheriff

LAN Sheriff watches which servers your network talks to. Self-hosted, no account. Observes only; blocks nothing. Built by 291 Group.

Ali-Marandi / GoNetworkMonitor

A lightweight, high-performance network monitoring tool written in Go for real-time traffic analysis.

sinyu1012 / proxypin-mcp-workbench

基于 ProxyPin 与 MCP 的自动化抓包、API 分析、Mock 场景和数据归档工作台，支持 移动端/Mac端 抓包并通过 MCP 让 AI 自动分析获取内容 / Mock 一系列接口。