Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
47,133 repositories indexed
25–43 of 43 · Most stars
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Fast and fully streamed Man-On-The-Middle to intercept, record, impersonate and alter HTTP/1.1, H2, websocket and gRPC traffic.
Visualize network topologies and collect graph statistics based on pcap files
Passive DNS Capture and Monitoring Toolkit
TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
A Rust library for constructing, sending, capturing, and decoding network packets
A convertor from .pcap network capture files to HTTP Archive files.
Merge multiple pcap files together, gracefully.
A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
SIPGREP: Display and Troubleshoot SIP signaling over IP networks in console
Process HTTP Pcaps With YARA
Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.
Potiron - Normalize, Index and Visualize Network Capture
Free and open-source medical device discovery and identification
Elixir PCAP library
Real-time network traffic analysis in your terminal.
A Go library providing a simplified abstraction over google/gopacket for network packet parsing and processing, reducing boilerplate and improving ease of use while preserving core packet inspection capabilities.
A package for converting PCAP files to parquet format.
split a pcap file into smaller files on TCP flow boundaries