Dshell is a network forensic analysis framework.
Repository Index
47,133 repositories indexed
1–6 of 6 · Most stars
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.
- pf-ring
- dpdk
- packet-parsing
- winpcap
TCP/IP packet demultiplexer. Download from:
- digital-forensics
- forensics
- tcp-protocol
- tcpip
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
Merge multiple pcap files together, gracefully.
- pcap
- merge
- tcpdump-capture
- packet-processing