justniffer is a TCP sniffer. It reassembles and reorders packets and displays the tcp flow in a customizable way. It can log network traffic in web server log format. It can also log network services performances (e.g. web server response times) and extract http content (images, html, scripts, etc)
ssl_logger is a Python-based tool that decrypts and logs a target process’s SSL/TLS traffic on Linux and macOS. It attaches to a running process by name or PID and hooks SSL_read and SSL_write calls to capture plaintext data flowing through encrypted connections. Output can be streamed to the console with verbose metadata or written to a PCAP file for later analysis in standard tooling. The utility is powered by dynamic instrumentation using the Frida framework, allowing it to intercept...
PotHead
What is it?
Pothead: A simple lightweight packet for creating a minimal interaction honeypot
How does it work?
Magic, Well kinda you don’t need super dupper knowledge to use this! Oops the magic failed ;)
a really nice INSTALL.md will be written unfortunately it’s not yet available. 1) Download all the files
2) Check if you got everything
3) Upload and configure the Website and backend (includes/Config.php & the .SQL files)
4) Do not forget to change your APIKEY!
...
Deploy in 115+ regions with the modern database for every enterprise.
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
nf_quota is an ip-based traffic accounting project. IPs can be added to users. It provides a kernel module that hooks onto netfilter and counts every packet passing a specified interface. If the quota for a ip/user is exceeded, the packet is dropped.
The first stage of development is do write a tool to anonymize packet capture files captured with libpcap. After that we will be integrating this with tcpdump to anonymize in real-time and analyze and look for its effect on different IDS's.
Packetmap performs realtime packet capture and analysis, displaying packet traffic on a animated map of the earth. Breakdowns can be performed by application type, host and country (well, actually, you can't yet, but that's the plan).
Now on github: https://github.com/randomnoun/packetmap
A tool to monitor and analyse data transmitted between clients
and a server through a TCP connection. This tool focuses on the data stream
(software layer), not on the lower level transmission protocol as
packet sniffers do.
IP accounting tools package based on Berkeley Packet Filer mechanism. Continue from BPFT by V.Vorobyev, TRAFD by V.Belekhov & S.Svirid.
Use the PCAP library to implement connection to bpf kernel pseudo-device.
...You can monitor specific
packets to/from network interfaces, internet protocol addresses
and also define specific filters for protocol, port and flag
properties of a packet. Output can be directed to database,
p
Protowatch is a userspace extension to Linux\'s 2.4 iptables firewalling code. Userspace will dynamically start a server to accept the packet, and log whatever the client sends. Useful for discovering what protocols are in use.