
Baskerville
Selective protocol extractor from PCAPs or interfaces
incident-responsenetwork-forensicsnetwork-security+1
512 years ago

Selective protocol extractor from PCAPs or interfaces

"A single malicious packet can own your device." — Android Security Team, Nov 2025

A lightweight eBPF program to monitor file creation and modification events on Linux. This tool leverages eBPF (Extended Berkeley Packet Filter) to…

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support