# monasticacademy/httptap

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/monasticacademy-httptap).**

4,165 stars · 65 forks · Go · MIT

## Links

- GitHub: https://github.com/monasticacademy/httptap
- Homepage: https://www.monasticacademy.org
- awesome-repositories: https://awesome-repositories.com/repository/monasticacademy-httptap.md

## Topics

`gvisor` `linux-network-namespace` `man-in-the-middle` `monastery` `networking` `tun-device`

## Description

httptap is a network utility for intercepting system-level packets and monitoring the HTTP and HTTPS traffic of Linux processes. It functions as a network packet sniffer and traffic monitor designed to capture and display real-time requests and responses sent by local applications.

The project includes a local traffic redirector that maps remote hostnames or IP addresses to localhost for service testing. To support detailed inspection, it features a TLS termination proxy for decrypting HTTPS traffic and a HAR file exporter that dumps captured data into the standard HTTP Archive format for external analysis.

The tool's technical capabilities cover kernel-level packet capture using eBPF, transparent proxy interception, and process-specific traffic filtering. It also provides local DNS redirection to override system name resolution.

## Tags

### Networking & Communication

- [HTTP Traffic Inspection](https://awesome-repositories.com/f/networking-communication/http-traffic-inspection.md) — Provides real-time monitoring and inspection of HTTP and HTTPS requests and responses sent by Linux processes.
- [Real-Time Traffic Dashboards](https://awesome-repositories.com/f/networking-communication/http-traffic-inspection/real-time-traffic-dashboards.md) — Captures and displays HTTP and HTTPS requests and responses made by a specific process in real time. ([source](https://cdn.jsdelivr.net/gh/monasticacademy/httptap@main/README.md))
- [Packet Capture Implementations](https://awesome-repositories.com/f/networking-communication/network-packet-parsers/packet-capture-implementations.md) — Implements high-performance packet interception at the kernel level using eBPF programs.
- [Process-Level Filters](https://awesome-repositories.com/f/networking-communication/traffic-filters/process-level-filters.md) — Isolates network packets by matching kernel-level process identifiers to filter traffic from a single target application.
- [Transparent Network Proxies](https://awesome-repositories.com/f/networking-communication/transparent-network-proxies.md) — Reroutes outbound network traffic through a local listener without requiring client-side configuration changes.
- [Local DNS Mapping](https://awesome-repositories.com/f/networking-communication/local-dns-mapping.md) — Overrides system name resolution to map remote hostnames to local IP addresses for testing.
- [Localhost Domain Mappings](https://awesome-repositories.com/f/networking-communication/local-server-tunnels/custom-domain-mapping/localhost-domain-mappings.md) — Maps specific hostnames or IP addresses to the local machine to enable communication with local services. ([source](https://cdn.jsdelivr.net/gh/monasticacademy/httptap@main/README.md))
- [Local Service Address Mapping](https://awesome-repositories.com/f/networking-communication/local-service-address-mapping.md) — Maps remote hostnames or IP addresses to localhost for local service testing.
- [HAR File Exporters](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-infrastructure-configuration/network-management/http-interaction-utilities/har-network-mocking/har-file-exporters.md) — Dumps intercepted network traffic into the standardized HTTP Archive format for external analysis.
- [Network Traffic Analyzers](https://awesome-repositories.com/f/networking-communication/network-infrastructure-routing/network-infrastructure-configuration/network-management/network-traffic-analyzers.md) — Exports captured web requests into HAR files for visualization and analysis in external tools.

### Development Tools & Productivity

- [Network Communication Debugging](https://awesome-repositories.com/f/development-tools-productivity/network-communication-debugging.md) — Observes the outbound web communication of running programs to identify API errors or unexpected behavior.

### Security & Cryptography

- [SSL/TLS Termination](https://awesome-repositories.com/f/security-cryptography/cryptography/ssl-tls-certificate-management/ssl-tls-termination.md) — Decrypts HTTPS traffic by acting as a proxy that terminates encrypted connections for inspection.

### System Administration & Monitoring

- [Packet-Sniffing Analyzers](https://awesome-repositories.com/f/system-administration-monitoring/network-traffic-analysis/packet-sniffing-analyzers.md) — Intercepts network traffic at the packet level to analyze data sent by local applications.

### Business & Productivity Software

- [Local Redirection Rules](https://awesome-repositories.com/f/business-productivity-software/email-management-tools/email-aliasing/api-managed-email-aliases/domain-alias-lifecycle-management/domain-redirection-rules/local-redirection-rules.md) — Routes network traffic from remote hostnames or IP addresses to a local machine for testing.

### Software Engineering & Architecture

- [HAR Serialization](https://awesome-repositories.com/f/software-engineering-architecture/agnostic-data-interchange-formats/data-serialization-standards/har-serialization.md) — Formats captured request and response metadata into standardized HAR JSON structures for external analysis tools.