Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
Repository Index
60,121 visible repositories in the index
1–24 of 50 · Most stars
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
A terminal UI for tshark, inspired by Wireshark
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
Dshell is a network forensic analysis framework.
Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
- mock-server
- proxy
- java-client
- javascript-client
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
Open Source Deep Packet Inspection Software Toolkit
- ndpi
- dpi
- deep-packet-inspection
- traffic-analysis
An in-app HTTP inspector for Android OkHttp clients
TranslatedAndroidHttpCapture network diagnostic tool is an Android phone packet capture app. Its main features include: packet capture on the phone, PING/DNS/TraceRoute diagnostics, and uploading and sharing captured HAR data. You can also think of it as the Android version of "Fiddler" \(^o^)/~
🔎 An HTTP inspector for Android & OkHTTP (like Charles but on device)
- okhttp
- interceptor
- okhttpclient
- android
Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).
iOS Debugging Tool 🚀
A lightweight, one line setup, iOS / OSX network debugging library! 🦊
- networking
- debugging
- urlsession
- urlrequest
Network Analysis Tool
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.
- pf-ring
- dpdk
- packet-parsing
- winpcap
Linux-CAN / SocketCAN user space applications
iOS network debugging, like a wizard 🧙♂️
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring
- monitoring
- troubleshooting
- voip
- rtc
Sherlock Holmes of the networking layer. :male_detective: