
netsniff-ng
A Swiss army knife for your daily Linux network plumbing.

A Swiss army knife for your daily Linux network plumbing.

Web-based Traffic and Cybersecurity Network Traffic Monitoring

TCP/IP packet demultiplexer. Download from:

A terminal UI for tshark, inspired by Wireshark

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Visualize network topologies and collect graph statistics based on pcap files

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

JA4+ is a suite of network fingerprinting standards

Python-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…

Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

create cypher create statements for neo4j out of netstat files from multiple machines

A tool for processing a lot of pcaps using tshark

Utility that converts an .etl file containing a Windows network packet capture into .pcapng format.