How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Pcap editing and replay tools for *NIX and Windows - Users please download source from
Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network traffic, indexing metadata, and performing network forensics. It functions as a network traffic indexer and security tool that enables the monitoring, querying, and browsing of large-scale network traffic across multi-cluster architectures. The platform distinguishes itself through its ability to manage distributed capture clusters from a centralized administrative dashboard. It integrates external data feeds with internal traffic logs to identify known threats and provides a pro
gopacket is a Go library for live packet capture and multi-layer protocol decoding. It provides a framework for parsing raw network bytes into structured protocol layers, enabling inspection and analysis of network traffic directly from interfaces or packet capture files. The library distinguishes itself through a layered protocol stack that organizes decoders as independent, composable layers, and an interface-based decoder registry that supports extensible custom protocol development. It offers zero-copy packet decoding for high-throughput parsing, stream-based TCP reassembly to reconstruct
A convertor from .pcap network capture files to HTTP Archive files.
TCP/IP packet demultiplexer. Download from:
The main features of simsong/tcpflow are: Network Forensics, Traffic Analysis Engines, Network Programming.
Projects with overlapping indexed features include: appneta/tcpreplay — Pcap editing and replay tools for *NIX and Windows - Users please download source from. arkime/arkime — Arkime is a distributed packet analysis platform and full packet capture system designed for recording raw network… google/gopacket — gopacket is a Go library for live packet capture and multi-layer protocol decoding. It provides a framework for… andrewf/pcap2har — A convertor from .pcap network capture files to HTTP Archive files. aol/moloch — Moloch is a full packet capture system and network forensics platform designed for large scale network traffic… alexcrichton/ssh2-rs — Documentation.