Results for: pcap

...WinDump is fully compatible with tcpdump and can be used to watch, diagnose and save to disk network traffic according to various complex rules. It can run under Windows 95, 98, ME, NT, 2000, XP, 2003 and Vista. WinDump captures using the WinPcap library and drivers, which are freely downloadable from the WinPcap website. WinDump supports 802.11b/g wireless capture and troubleshooting through the Riverbed AirPcap adapter. WinDump is free and is released under a BSD-style license. WinDump is able to use the interfaces exported by WinPcap. WinDump can run on all the operating systems supported by WinPcap. ...

Active Wall uses the middle layer drivers developed independently as the filter engines, which are more low-leveled than other software which uses WinPCap. Because WinPCap is a protocol-type driver, it can only monitor but not block. The other software which uses WinPCap can only block TCP communications, but cannot block UDP, ICMP, IGMP data packets. It has been proved that Active Wall is more stable, correct and effective after working online for a long time. Most similar software support the only one mode- Passby monitoring mode. ...

The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects the network traffic using a powerful and extensive rules and signature language, and has powerful Lua scripting support for detection of complex threats. With standard input and output formats like YAML and JSON integrations with tools like existing SIEMs, Splunk, Logstash/Elasticsearch, Kibana, and other database become effortless. ...

NetworkMiner is a network forensics tool that extracts artifacts such as files, images, emails, and passwords from captured network traffic in PCAP files. It can also capture live network traffic by sniffing a network interface. Detailed information about each IP address in the analyzed network traffic is aggregated into a network host inventory, which can be used for passive asset discovery and to get an overview of communicating devices. NetworkMiner is primarily designed to run on Windows but can also be used on Linux. ...

Arkime is an open source, large-scale, full packet capturing, indexing, and database system designed to augment existing security infrastructure by storing and indexing network traffic in standard PCAP format. It offers full network visibility, facilitating the swift identification and resolution of security and network issues. Security teams gain access to the necessary network visibility data essential for responding to and investigating incidents to expose the full attack scope. Designed to be deployed across multiple clustered systems, Arkime provides the ability to scale to hundreds of gigabits per second. ...

...Key features include selecting a network adapter to inspect, applying filters to observed traffic, viewing overall statistics and real-time charts of Internet traffic, exporting comprehensive capture reports as PCAP files, identifying over 6,000 upper-layer services, protocols, trojans, and worms, discovering domain names and ASNs of hosts, pinpointing connections in the local network.

...The platform offers cross-platform compatibility across Windows, macOS, and Linux, with both free open-source and professional editions available. Key features include TLS packet interception, Universal TLS Upgrade Detection for protocols like SMTPS, IMAP, PostgreSQL TLS, and STARTTLS, plus PCAP file export for analysis with external tools like Wireshark.

...Built atop ParaView, it efficiently renders large point clouds and offers features such as 3D visualization of time-stamped LiDAR returns, a spreadsheet inspector for attributes like timestamp and azimuth, and the ability to display multiple data frames simultaneously. Users can input data from live sensor streams or recorded .pcap files, apply 3D transformations to point clouds and manage subsets of laser data. LidarView supports various sensors, including models from Velodyne, Hesai, Robosense, Livox, and Leishen, enabling visualization of live streams and replaying of recorded data. The platform integrates advanced algorithms for Simultaneous Localization and Mapping (SLAM), facilitating accurate environmental reconstruction and sensor localization. ...

VeloView is an open-source application designed for real-time visualization and processing of 3D LiDAR data captured from Velodyne's HDL sensors, including models such as HDL-64E, HDL-32E, VLP-32, VLP-16, Puck, Puck LITE, Puck Hi-Res, Ultra Alpha, Alpha Prime, Velarray, Velabit, and Veladome. It enables users to visualize live data streams or playback pre-recorded data stored in .pcap files, with the capability to record live streams for subsequent analysis. The software provides tools to display, select, and measure information from captured points, supporting custom color maps based on variables like intensity-of-return, time, distance, azimuth, dual return type, and laser ID. Users can export data as XYZ in CSV format or capture screenshots of the point cloud display. ...