
passivedns
A network sniffer that logs all DNS server replies for use in a passive DNS setup

A network sniffer that logs all DNS server replies for use in a passive DNS setup

JA4+ is a suite of network fingerprinting standards

Python wrapper for tshark, allowing python packet parsing using wireshark dissectors

Decapsulate traffic encapsulated within GRE, IPIP, 6in4, ESP (ipsec) protocols, can also remove IEEE 802.1Q (virtual lan) header. Works with pcap…


❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight…

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata…

A network packet forensics tool for SSH

NetworkAssessment: Network Compromise Assessment Tool

A tool to assist with network-based hunting for GRU's Drovorub malware c2


It was developed to speed up the processes of SOC Analysts during analysis

A cross platform http sniffer with a web UI