
wireshark
Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…


PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Passive service locator, a python sniffer that identifies servers, clients, names and much more

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

Visualize network topologies and collect graph statistics based on pcap files

create cypher create statements for neo4j out of netstat files from multiple machines

It was developed to speed up the processes of SOC Analysts during analysis

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

A pcap capture analysis helper

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

A Zeek STUN protocol analyzer based on Spicy.

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

A network packet forensics tool for SSH

A tool for processing a lot of pcaps using tshark