
ndff
A flow-based network monitor with Deep Packet Inspection
dns-analysislog-analysisnetwork-forensics+2

A flow-based network monitor with Deep Packet Inspection

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.