
Hodometer
A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

A single-file native Windows tray application (C, Win32, no runtime) that shows exactly which program is sending and receiving bytes and to which…

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

Open-source network forensics toolkit for packet analysis, port scanning, host discovery, and IP geolocation. Supports ARP, ICMP, TCP, UDP pings and…

Visualize network topologies and collect graph statistics based on pcap files

Extracts IP addresses from pcap/pcapng network traffic files and generates CSV reports with geolocation, ISP, and organizational details for each IP.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Wireshark's official code repository. You can keep the releases coming by donating at https://wiresharkfoundation.org/donate/.

A network sniffer that logs all DNS server replies for use in a passive DNS setup


A Swiss army knife for your daily Linux network plumbing.

Malicious HTTP traffic explorer

Malcom - Malware Communications Analyzer

The best-in-class macOS app to See every packet clearly on your Mac. Alternative to Wireshark

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.

The Multiplatform Linux Sandbox

Flows-first PCAP TUI (case files, gorgeous UX). Do do do do.

Powershell module for VMWare vSphere forensics

Pcap importer for Burp