Tools

seladb/pcapplusplus

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

desowin/usbpcap

USB packet capture for Windows

wireshark/wireshark

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

airbus-cert/winshark

A wireshark plugin to instrument ETW

google/stenographer

Stenographer is a packet capture solution which aims to quickly spool all packets to disk, then provide simple, fast access to subsets of those…

the-tcpdump-group/tcpdump

the TCPdump network dissector

simsong/tcpflow

TCP/IP packet demultiplexer. Download from:

microsoft/etl2pcapng

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

vikwin/pcapfex

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

mhils/honeyproxy

This project is now part of @mitmproxy.

rjbhide/wireshark-forensics-plugin

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

halildeniz/networkassessment

NetworkAssessment: Network Compromise Assessment Tool

leonward/openfpc

OpenFPC, Open Source Full Packet Capture

misp/misp-wireshark

Lua plugin to extract data from Wireshark and convert it into MISP format

benadia/an-integrated-wireless-network-forensic-analysis-framework

This framework combines a set of existing open source tools into an integrated package that automates the forensics investigation process. It is able…

gilberto47831/network-filesystem-forensics

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)