Repository Index

Comfortably monitor your network traffic 🕵️‍♂️

• networking
• packet-sniffer
• linux
• macos

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.

• golang
• ebpf
• tls
• ssl

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

• kubernetes
• golang
• rest
• grpc

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

• command-line-tool
• ebpf
• network
• bpf

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

• ebpf
• observability
• kubernetes
• metrics

Packet, where are you? -- eBPF-based Linux kernel networking debugger

• linux
• network
• ebpf
• bpf

the LIBpcap interface to various kernel packet capture mechanism

• pcap
• pcapng
• packet-capture
• sniffer

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.

• pf-ring
• dpdk
• packet-parsing
• winpcap

High-speed packet processing framework

• pf-ring
• capture-packets
• high-speed
• 100gbit

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux

• ebpf
• linux
• ratatui
• rust

TCP/IP packet demultiplexer. Download from:

• digital-forensics
• forensics
• tcp-protocol
• tcpip

Process-aware, eBPF-based tcpdump

• ebpf
• ebpf-tc
• tcpdump
• tcpdump-like

pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].

• netflow
• ipfix
• sflow
• bgp

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

• sniffer
• grepping

Netflow processing tools

• nfdump
• ipfix
• nfsen
• netflow

Functional Network Framework for Multi-Core Architectures

TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

• packet-generator
• packet-analyzer
• network
• networking

softflowd: A flow-based network traffic analyser capable of Cisco NetFlow data export software.

• netflow
• netflow-exports
• netflow-v9
• netflow-v5