IDABench
Old School Light Weight Network Forensic Tool
This is the fork of the SHADOW IDS produced in 2003. It has been updated to work on modern (SystemD, OpenRC) GNU suites. The original developers added the plugable architecture. It has been tweaked for TSHARK. It requires a CGI web server.
It will run tcpdump 24x7x???. It will render initial analysis, and searchability.
# idabench Version 1.0.1
idabench is public domain software and may be freely used and #
distributed with or without modification....