


Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Capture and analyze network traffic with deep packet inspection, protocol decoding across hundreds of protocols, and capture-file support for…

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Public honeypot datasets and observation reports with HTTP/TLS fingerprint data (JA3/JA4), pseudonymized source IPs, and exploitation attempt…

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

A network sniffer that logs all DNS server replies for use in a passive DNS setup

Indicators of Compromise and hunting guidance for CVE-2026-88771, an unauthenticated command injection in Citrix NetScaler ADC and Gateway, covering…

PowerShell script that monitors Windows DNS traffic via pktmon to detect poisoning, spoofing, rogue resolver responses, and gateway MAC changes,…

Simple utility for sniffing decrypted HTTP/HTTPS traffic on a macOS/iOS device (either jailbroken or not)

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Offline AI Security Assistant for Air-Gapped Pentesting

It was developed to speed up the processes of SOC Analysts during analysis

Automation tool designed to simplify the analysis of PCAP (Packet Capture) files

Passive service locator, a python sniffer that identifies servers, clients, names and much more

A Zeek STUN protocol analyzer based on Spicy.

A tool for processing a lot of pcaps using tshark

A pcap capture analysis helper