Search Results for "pcap"
Sort By:
Showing 71 open source projects for "pcap"
View related business solutions-
Gen AI apps are built with MongoDB AtlasMongoDB Atlas is the developer-friendly database used to build, scale, and run gen AI and LLM-powered apps—without needing a separate vector database. Atlas offers built-in vector search, global availability across 115+ regions, and flexible document modeling. Start building AI apps faster, all in one place.
-
Jscrambler: Pioneering Client-Side Protection PlatformJscrambler is the leader in Client-Side Protection and Compliance. We were the first to merge advanced polymorphic JavaScript obfuscation with fine-grained third-party tag protection in a unified Client-Side Protection and Compliance Platform. Our integrated solution ensures a robust defense against current and emerging client-side cyber threats, data leaks, and IP theft, empowering software development and digital teams to innovate securely. With Jscrambler, businesses adopt a unified, future-proof client-side security policy all while achieving compliance with emerging security standards including PCI DSS v4.0. Trusted by digital leaders worldwide, Jscrambler gives businesses the freedom to innovate securely.
-
1
Kubeshark
The API traffic viewer for Kubernetes providing deep visibility
...Monitors all API traffic and payloads to find API drift and API anomalies and trace them down to source. Instant service dependency mapping through real-time API traffic analysis. Store all or a subset of traffic in PCAP files. View TCP stream request-response pairs and replay requests' payloads to a destination service. -
2
Arkime
A full packet capturing, indexing, and database system
Arkime is an open source, large-scale, full packet capturing, indexing, and database system designed to augment existing security infrastructure by storing and indexing network traffic in standard PCAP format. It offers full network visibility, facilitating the swift identification and resolution of security and network issues. Security teams gain access to the necessary network visibility data essential for responding to and investigating incidents to expose the full attack scope. Designed to be deployed across multiple clustered systems, Arkime provides the ability to scale to hundreds of gigabits per second. ... -
3
PcapPlusPlus
Multiplatform C++ library for parsing and crafting of network packets
...PcapPlusPlus is available in popular package managers such as Homebrew and Conan. PcapPlusPlus provides an easy-to-use interface for reading and writing network packets into files.It supports the most popular file formats which are PCAP and PCAPNG. -
4
InterceptSuite
A TLS MITM proxy for Non-HTTP traffic, with support for TLS upgrades
InterceptSuite is a cross‑platform, SOCKS5‑based MITM proxy specially designed to intercept, inspect, analyze, and manipulate encrypted network traffic at the TCP/TLS layer. It goes beyond HTTP‑focused tools like Burp Suite and ZAP by providing universal TLS interception—including STARTTLS and non‑HTTP protocols—offering deep visibility and control for security testing and debugging. InterceptSuite bridges this gap by providing a universal TLS interception engine that works with any... -
Houzz Pro is the #1 business management software for home construction and design professionals.Get an all-in-one solution that spans the full customer lifecycle, including marketing, CRM, estimation & proposal building, project management, a 3D Floor Plan builder, an online invoicing and payment portal, as well as a client portal and collaboration tools. Start a free trial today to see why thousands of Pros run their business on Houzz Pro. Plans available for all business sizes.
-
5
Scapy
Scapy is a Python-based interactive packet manipulation program
Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work. It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, wireshark, p0f, etc.). ... -
6
netsniff-ng
A Swiss army knife for your daily Linux network plumbing
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance. -
7
fwknop
Single Packet Authorization, Port Knocking
fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter (fwknop supports iptables and firewalld on Linux, ipfw on FreeBSD and Mac OS X, and PF on OpenBSD) and libpcap. SPA is essentially next-generation port knocking (more on this below). The design decisions that guide the development of fwknop can be found in the blog post "Single Packet... -
8
jfMonitor
Network / Storage Monitoring Solution
...Usage: - jfMonitor is a multi-client / server setup - each client will report file system usage to the server - any client (or server) can also ping any locally connected network which requires pcap installed. WebSite : http://jfmonitor.sf.net Source Code : https://github.com/pquiring/javaforce/tree/master/projects/jfmonitor -
9
ngrep strives to provide most of GNU grep's common features,applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular expressions to match against data payloads of packets. SUPPORT/REPORTING BUGS: please use https://github.com/jpr5/ngrep/issues Thank you!
-
Peer to Peer Recognition Brings Teams TogetherCreate a positive and energetic workplace environment with Motivosity, an innovative employee recognition and engagement platform. With Motivosity, employees can give each other small monetary bonuses for doing great things, promoting trust, collaboration, and appreciation in the workplace. The software solution comes with features such as an open-currency open-reward system, insights and analytics, dynamic organization chart, award programs, milestones, and more.
-
10
Yet Another BACnet Explorer
Graphical explorer for BACnet and Free BACnet library in C#
Graphical explorer program written in C#, for browsing BACnet devices (run on Windows & Linux). Supports BACnet MS/TP, Ethernet, IPv4, IPv6, SecureConnect Basic functions for read, write, read multiple, write multiple, iam, whois, subscribeCOV, notify, WriteFile, ReadFile etc. Includes three demo server applications : a generic server, a wall mounted room controller simulator, a weather server (gets data from an Internet webservice). Includes a lot of samples C# source code. Raspberry...">
-
11
IOT network monitor
raspberry pi4 image using wifi in APN mode for IOT network monitoring
A Raspberry pi4 is used to run wifi in APN mode, and IOT devices are subbed to this SSID, and packet capture and interrogation are performed on the IOT traffic. Many statistics and plots are derived from the IOT traffic. This "iotsnoop" project also contains the previous project "imonitorg" which is a full, long term monitoring of a user's Internet connection with stats and plots. All stats and plots are available via webpage served by pi4. 802.11g to max range, minimize IOT traffic. ... -
12
Bit-Twist (Packet generator/editor)
Packet generator and packet editor for Windows, Linux, BSD, and macOS
...It is designed to complement tcpdump, which by itself has done a great job at capturing network traffic. With Bit-Twist, you can now regenerate your captured traffic onto a live network! Packets are generated from tcpdump trace file (.pcap file). Bit-Twist comes with a comprehensive trace file editor to allow you to change the contents of a trace file. Bit-Twist is designed for exceptional speed, allowing you to edit 10 million packets in under 3 seconds and send them over a live network at throughput levels that match your NIC's maximum line rate, up to 10 Gbps. ... -
13
alp
Access Log Profiler
alp is Access Log Profiler. -
14
Termshark
A terminal UI for tshark, inspired by Wireshark
A terminal user-interface for tshark, inspired by Wireshark. If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help! Read pcap files or sniff live interfaces (where tshark is permitted). Filter pcaps or live captures using Wireshark's display filters. Reassemble and inspect TCP and UDP flows. View network conversations by protocol. Copy ranges of packets to the clipboard from the terminal. -
15
PacketStreamer
Distributed tcpdump for cloud native environments
...Traffic streams may be compressed and/or encrypted using TLS. The PacketStreamer receiver accepts PacketStreamer streams from multiple remote sensors and writes the packets to a local pcap capture file. PacketStreamer sensors collect raw network packets on remote hosts. It selects packets to capture using a BPF filter, and forwards them to a central receiver process where they are written in pcap format. Sensors are very lightweight and impose little performance impact on the remote hosts. PacketStreamer sensors can be run on bare-metal servers, on Docker hosts, and on Kubernetes nodes. -
16
pyWhat
Identify emails, IP addresses, and more
pyWhat is a Python-based identification tool designed to figure out “what” a piece of text or file content represents, especially in security and OSINT workflows. Given inputs such as hex strings, URLs, email addresses, IP addresses, credit card numbers, cryptocurrency wallets, or entire .pcap capture files, it scans for structured patterns and tells you what it finds. The tool is recursive: it can traverse files and directories to extract meaningful entities, which is useful when analyzing malware samples, network captures, or code repositories at scale. It offers powerful filters called “tags” and distributions that let you narrow results to specific categories like bug bounties, cryptocurrencies, or AWS-related artifacts. ... -
17
pcapfix
repair corrupted pcap and pcapng files
this tool tries to repair your broken pcap and pcapng files by fixing the global header respectively packet blocks and recovering the packets by searching und guessing the packet headers or blocks -
18
netsnake-sniffer
Network sniffer which a similar to WireShark with sending own packets
...It has an ability to filter intercepted packets by source ip,source port, destination ip,destination port, type of protocol and length packets. It is possible to save a dump of captured packets in .pcap file extension for opening by WireShark software. Also,the main advantage of netsnake is sending your own network packets (ARP,TCP/IP,UDP) whith chosen parameters including payload data.which is byte array with max length = 1450 bytes. If your array of bytes has more 1450 bytes, it breaks into packages. My GitHub repository https://github.com/pavelinfsec2020/netsnake TUTORIAL you can watch in my videos: (EN) https://www.youtube.com/watch?... -
19
Pwnagotchi
Deep Reinforcement learning instrumenting bettercap for WiFi pwning
Pwnagotchi is an A2C-based “AI” powered by bettercap and running on a Raspberry Pi Zero W that learns from its surrounding WiFi environment in order to maximize the crackable WPA key material it captures (either through passive sniffing or by performing deauthentication and association attacks). This material is collected on disk as PCAP files containing any form of handshake supported by hashcat, including full and half WPA handshakes as well as PMKIDs. Instead of merely playing Super Mario or Atari games like most reinforcement learning based “AI” (yawn), Pwnagotchi tunes its own parameters over time to get better at pwning WiFi things in the real world environments you expose it to. ... -
20
jNetPcap - A Libpcap Java Binding
A java PCAP and DPI library
A java wrapper for popular "libpcap" and "WinPcap" libraries. Accurate full API translation. Packet buffers delivered with no copies. Send custom packets, gather statistics. Comprehensive and easily extensible DPI engine. -
21
pcapdatacopy
Copy payload data from Wireshark .pcap files(s) to file
*** Require VB.Net Runtime 2.0 or higher *** If you need a quick way to dump the payload data from TCP/UDP packets in a wireshark capture file (.pcap), pcapdatacopy will meet your needs. Either an individual file or folder containing multiple files can be processed. In addition there are options available to define the IP header size and the offset in the payload data to start copying from. Version 1.7 (08/06/20) Needed to see timestamps on raw packet capture involving human readable content, new option added to create text file with timestamps and payload data Version 1.6 (17/02/2016) Added option to filter raw payload data based on packet type (TCP/UDP) Added function to create new wireshark .pcap from one or more input files. ... -
22
sharppcap
ully managed, cross platform
Fully managed, cross-platform (Windows, Mac, Linux) .NET library for capturing packets from live and file-based devices -
23
NFX Detective is a novel Network forensic analysis tool that implements methods for extraction of application content from communication using supported protocols. The implemented functionality includes: Analysis project management that enables to analyze multiple PCAPs in a single session. Support for large PCAP files, up to GBs. Advanced visualization using different views of various levels of detail - from overview to detailed information about every single packet. A collection of parsers and content extraction methods for the most used application protocols. Filtering and full-text search in captured traffic. NFX Detective is an extensible platform that can be customized to individual requirements: Possibility to create new extraction modules for other application protocols. ...
-
24
Security Datasets
Re-play Security Events
Security‑Datasets is a community-driven repository maintained by the Open Threat Research Forge (OTRF) that curates publicly available malicious and benign datasets for threat-hunting, machine learning, event analysis, and cybersecurity research. Datasets include Windows events, logs, alerts, and simulated attack data to support detection engineering and academic research. -
25
Sometimes in the process of debugging SIP UAs you are trying to simulate a scenario for which all you have is a packet trace from the user. You can use this program to convert the SIP packets from the pcap trace to sipp xml files, and then use sipp with the resulted scenario to simulate the test case. Note: only supports traces with SIP over UDP See "pcap2sipp doc" for more information