Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
- network-security
- security
- arkime
- cybersecurity
Repository Index
47,133 repositories indexed
73–96 of 118 · Most stars
A swift network profiler built on top of URLSession.
- ios
- networking
- swift
- interceptor
ESP32 Packet Monitor + SD card!
PacketFu, a mid-level packet manipulation library for Ruby
Fast and fully streamed Man-On-The-Middle to intercept, record, impersonate and alter HTTP/1.1, H2, websocket and gRPC traffic.
- csharp
- http
- https
- mitm
Visualize network topologies and collect graph statistics based on pcap files
- network-topology
- python
- pcap
- security-tools
Passive DNS Capture and Monitoring Toolkit
- passivedns
- passive-dns
- dns-server
- dns
CANToolz - framework for black-box CAN network analysis
TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux
- packet-generator
- packet-analyzer
- network
- networking
A Rust library for constructing, sending, capturing, and decoding network packets
- libpcap
- network-programming
- networking
- packet-crafting
Visualize CAN Bus messages in real time
TranslatedAn open-source traffic debugging workbench for developers and AI Agents, making business anomalies filterable, debugging changes traceable, and troubleshooting scenes shareable.
- lua
- mitm
- mitm-proxy
- mitmproxy
pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.
- cbas
- python
- sap
- scapy
A convertor from .pcap network capture files to HTTP Archive files.
An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
- proxy
- tcp
- tcp-proxy
- penetration-testing
swiss army knife of Controller Area Networks (CAN) often used in cars and building automation, etc...
softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.
- netflow
- netflow-exports
- netflow-v9
- netflow-v5
Simplify software testing, by easily mocking any system using HTTP/HTTPS, allowing a team to test and develop against a service that is not complete or is unstable or just to reproduce planned/edge cases.
A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
SIPGREP: Display and Troubleshoot SIP signaling over IP networks in console
A simple, cross-platform utility to classify packets into flows using only the essential 4-tuple.
Live IP Software Toolkit to assist EBU members in the implementation of IP based facilities
Python only library to scan and decode advertised BLE info. Uses asyncio. Can decode Ruuvi Tag. Can broadcast EddyStone packets.