How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network traffic, indexing metadata, and performing network forensics. It functions as a network traffic indexer and security tool that enables the monitoring, querying, and browsing of large-scale network traffic across multi-cluster architectures. The platform distinguishes itself through its ability to manage distributed capture clusters from a centralized administrative dashboard. It integrates external data feeds with internal traffic logs to identify known threats and provides a pro
A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.
HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
The main features of salesforce/hassh are: Network Monitoring Tools, Fingerprinting and Signatures.
Projects with overlapping indexed features include: arkime/arkime — Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network… cert-polska/hfinger. cisco/joy — A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and… cisco/mercury. dreadl0ck/netcap — A framework for secure and scalable network traffic analysis - https://netcap.io. 0x4d31/fatt.