
Wireshark
Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Multiplatform C++ library for high-performance network packet capture, parsing, crafting, and analysis. Supports libpcap, DPDK, AF_XDP, PF_RING, and…

Packet capture artifacts of plex2shell exploitation against Plex, including lab and in-the-wild traffic, for building and validating detection…

A Zeek Wireguard protocol analyzer based on Spicy.

TCP/IP packet demultiplexer. Download from:

A Zeek IPSec protocol analyzer based on Spicy.

A Zeek OSPF packet analyzer based on Spicy.

A Swiss army knife for your daily Linux network plumbing.

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

Provides packet processing capabilities for Go

Lua plugin to extract data from Wireshark and convert it into MISP format

Zeek support for Community ID flow hashing.

A terminal UI for tshark, inspired by Wireshark

Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd (CVE-2001-0550)

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

Wireshark plugin that correlates network traffic with threat intelligence, asset tags, and vulnerability data to accelerate forensic analysis of PCAP…

Pcap importer for Burp