Trending Categories Repositories Insights Dependencies Withheld

Trending Categories Repositories Insights Dependencies Withheld

Trending repositories

Ranked by Attention Score: stars gained over the last 180 complete days

Period

Sort order

Topics: pcap

Topics

Search topics

No listed topic matches. Press Enter to filter by “”.

Category

Filters (1)

Apply

Filters

Primary language

License

Total stars

Last push

Created

Archived

Clear all filters

6 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)

Language: Python
Topic: pcap
Clear all

1.secdev / scapy

Scapy: the Python-based interactive packet manipulation program & library.

scapy
python
network
network-analysis
network-visualization
network-discovery
+9 more

Python GPL-2.013K total2.3K forks

+459 stars

from 12,209 · score 6.13

2.cisagov / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

network-security
pcap
security
arkime
cybersecurity
infosec
+7 more

Python Other license2.6K total455 forks

+191 stars

from 2,386 · score 5.26

3.idaholab / Malcolm

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

network-security
security
arkime
cybersecurity
infosec
network-traffic-analysis
+7 more

Python Other license496 total78 forks

+29 stars

from 465 · score 3.40

4.nfstream / nfstream

NFStream: a Flexible Network Data Analysis Framework.

data-science
data-analysis
data-mining
network-analysis
network-security
network-monitoring
+13 more

Python LGPL-3.01.2K total147 forks

+23 stars

from 1,200 · score 3.18

5.tomchop / malcom

Malcom - Malware Communications Analyzer

malware
network-traffic
pcap
threat-intelligence
malware-analysis
infosec
+1 more

Python Other license1.2K total212 forks

+7 stars

from 1,167 · score 2.08

6.1ultimat3 / PcapViz

Visualize network topologies and collect graph statistics based on pcap files

network-topology
python
pcap
security-tools

Python No license360 total63 forks

+3 stars

from 357 · score 1.39

Order: Attention Score

Most net stars gained in the window first. The score only puts this gain on a log scale, so the order is the order of the gain.

How the ranking works

Ranked by stars gained in the window. The score is the natural log of one plus that gain, so a repository's rank is exactly its star gain's rank.

score = log1p(net stars gained in the trailing T complete UTC days)

A repository is ranked only when its Star History covers every day of the window and its latest Observation is not missing.

The longest window is 180 days. Star History from the Repository Host goes back at most 180 days before a repository's first Observation. A longer window needs more days of Observations first. A repository younger than the window is not ranked in it.

The filters narrow the same eligible repositories. A repository matches the topics when it has any of them. Total stars is the count now. Last push and creation on the Repository Host count back from the start of today (UTC). The counts beside the languages, licenses, and topics include all ranked repositories in the window. A Category holds the repositories that its published rules match; see Categories.

Repositories enter the index from the Seed Dataset or by gaining stars faster than the published admission threshold, whatever their size. Admission is permanent, so an archived repository can still rank.

Browse the Repository Index

Trending Categories Repositories Insights Dependencies Withheld Withholding Rule Privacy Send feedback