Search Results for "network flow"

ttl is a modern traceroute-style network diagnostic tool built to feel more like an interactive, real-time “mtr replacement” than a one-shot traceroute dump. It uses a full-screen terminal UI to continuously probe paths and refresh hop-by-hop measurements, which makes transient loss, jitter, and routing changes much easier to spot. The design emphasizes per-hop visibility with live statistics, and it enriches what you see by resolving network identity details like ASN and geolocation when...

tcpreplay is a suite of tools to edit and replay captured network traffic.

Skydive is an open source real-time network topology and protocols analyzer providing a comprehensive way of understanding what is happening in your network infrastructure. Captures network topology, interface, bridge, and namespace attributes and keeps the history of all the modifications. Distributed probe, L2-L4 classifier, GRE, VXLAN, GENEVE, MPLS/GRE, MPLS/UDP tunneling support.

Create ports : TCP/UDP/Terminal/File/RS232(txrx)/DB/System/Bluetooth/JNA/ETH(jpcap)/Sound. Simply configure with GUI/SFC XML file/CLI. Display, modify, replay, store (tcpdump), decode flow of bytes or objects. Implement : loop/echo/paddings/... and delai/DB2XML/Stacks/Matrix/... management. Stream conversations with a dynamic packet analyse.

netstack is a userspace TCP/IP networking stack written in Go that implements core IPv4/IPv6 protocols with a focus on correctness, isolation, and testability. By running entirely in user space, it avoids kernel dependencies and can be embedded into sandboxes, virtualized environments, or custom appliances. Its architecture models NICs, link endpoints, route tables, and protocol engines as composable interfaces, enabling precise control over packet flow and easy mocking in tests. The stack...

pfck is a perl script that reads the state table of pf and reports back flows based on a supplied port number. pfck is very handy in ddos attacks to identify who's hitting a host or network on a particular port service, and who they are specifically hitting.

An enterprise-focused NetFlow reporter/analyzer tool featuring clickable graphs, powerful categorization, automatic exporter discovery, and full access to all aspects of the raw flow data (millisecond accuracy, QoS settings, TCP flags, etc).

FlowDoh is an NFSEN (nfsen.sourceforge.net) plugin that can... * Provide a real-time dashboard of the top-talkers on your network * Send email alerts based on network activity thresholds * Allow quick drill-down into detailed flow information * Record historical values so you can know if the network traffic is normal (Planned feature) FlowDoh can be used for multiple purposes: * Find hacked servers on your network * Identify users who are hogging bandwidth (such as peer-to-peer file-sharing) * Create a baseline of network statistics about your servers (planned feature) FAQ: Q: Why is it called FlowDoh? ...

A proof-of-concept application of the Statistical Protocol IDentification (SPID) algorithm. SPID can detect the application layer protocol (layer 7) by analysing flow (packet sizes etc.) and payload statistics (byte values etc.) from pcap files.

The files on this repository are out of date. Please visit http://github.com/justindthomas/flower_as for the current project.

pipeworks is a benchmarking tool for pipelines that is very similar to pipemeter. It writes its stdin to its stdout, while reporting the data flow rate to stderr. It features adjustable block size and bandwidth limiting capabilities.

F.L.A.V.I.O. is a GPL'ed data grapher for netflow data export compatible devices (Cisco and Juniper routers among others, or unix servers running ntop with netflow export plugin). It uses a MySQL backend and has been entirely developed in Perl.