Search Results for "pcap"
Sort By:
Showing 79 open source projects for "pcap"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
1
Arkime
A full packet capturing, indexing, and database system
Arkime is an open source, large-scale, full packet capturing, indexing, and database system designed to augment existing security infrastructure by storing and indexing network traffic in standard PCAP format. It offers full network visibility, facilitating the swift identification and resolution of security and network issues. Security teams gain access to the necessary network visibility data essential for responding to and investigating incidents to expose the full attack scope. Designed to be deployed across multiple clustered systems, Arkime provides the ability to scale to hundreds of gigabits per second. ... -
2
netsniff-ng
A Swiss army knife for your daily Linux network plumbing
netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. Our toolkit can be used for network development and analysis, debugging, auditing, or network reconnaissance. -
3
Scapy
Scapy is a Python-based interactive packet manipulation program
Scapy is a powerful Python-based interactive packet manipulation program and library. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, store or read them using pcap files, match requests and replies, and much more. It is designed to allow fast packet prototyping by using default values that work. It can easily handle most classical tasks like scanning, tracerouting, probing, unit tests, attacks or network discovery (it can replace hping, 85% of nmap, arpspoof, arp-sk, arping, tcpdump, wireshark, p0f, etc.). ... -
4
tcpreplay
edit and replay captured network traffic
tcpreplay is a suite of tools to edit and replay captured network traffic. -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
5
VoIP monitor
VoIP SIP and SKINNY quality analyzer and packet / audio recording tool
...VoIPmonitor is designed to analyze quality of VoIP call based on network parameters - delay variation and packet loss according to ITU-T G.107 E-model which predicts quality on MOS scale. Calls with all relevant statistics are saved to MySQL or ODBC database. Optionally each call can be saved to pcap file with either only SIP / SKINNY protocol or SIP/RTP/RTCP/T.38/udptl protocols. VoIPmonitor can also decode audio. -
6
Shadow Network Fingerprinting Engine
SNF is a 100% offline, air-gap passive network intelligence engine
...It detects C2 beacons, DGA domains, DNS tunnels, lateral movement, data exfiltration, and full ICS/SCADA protocol abuse across Modbus, S7comm, EtherNet/IP, PROFINET, and DNP3. Every run produces structured NDJSON with a determinism guarantee — same PCAP, same config, same version, SHA-256 identical output every time. Court-admissible evidence bundles built in. **Zero network calls. Ever. Not a setting. Architecture.** ## Validated Results - Emotet epoch 3 PCAP — 23 IOC hits, 52 threat matches - MAWI backbone — 14.9M packets, zero crashes, 332K graph nodes - nmap standard scan — 1,971 scan events detected ## Links - Website: https://shadownf.com - GitHub (open core): https://github.com/padigeltejas/snf-core -
7
ngrep strives to provide most of GNU grep's common features,applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular expressions to match against data payloads of packets. SUPPORT/REPORTING BUGS: please use https://github.com/jpr5/ngrep/issues Thank you!
-
8
jfMonitor
Network / Storage Monitoring Solution
...Usage: - jfMonitor is a multi-client / server setup - each client will report file system usage to the server - any client (or server) can also ping any locally connected network which requires pcap installed. WebSite : http://jfmonitor.sf.net Source Code : https://github.com/pquiring/javaforce/tree/master/projects/jfmonitor -
9
Bit-Twist (Packet generator/editor)
Packet generator and packet editor for Windows, Linux, BSD, and macOS
...It is designed to complement tcpdump, which by itself has done a great job at capturing network traffic. With Bit-Twist, you can now regenerate your captured traffic onto a live network! Packets are generated from tcpdump trace file (.pcap file). Bit-Twist comes with a comprehensive trace file editor to allow you to change the contents of a trace file. Bit-Twist is designed for exceptional speed, allowing you to edit 10 million packets in under 3 seconds and send them over a live network at throughput levels that match your NIC's maximum line rate, up to 10 Gbps. ... -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
Cockatrice III
A Macintosh m68k emulator
I'm taking an ancient version of BasiliskII and adding features that interest me, starting with SDL support, OS X, Linux and Windows, support for SLiRP and PCAP for native networking. -
11
PacketStreamer
Distributed tcpdump for cloud native environments
...Traffic streams may be compressed and/or encrypted using TLS. The PacketStreamer receiver accepts PacketStreamer streams from multiple remote sensors and writes the packets to a local pcap capture file. PacketStreamer sensors collect raw network packets on remote hosts. It selects packets to capture using a BPF filter, and forwards them to a central receiver process where they are written in pcap format. Sensors are very lightweight and impose little performance impact on the remote hosts. PacketStreamer sensors can be run on bare-metal servers, on Docker hosts, and on Kubernetes nodes. -
12
RCDCap
RCDCap is a remote capture preprocessor
RCDCap is a packet processing framework. At its core, it incorporates basic mechanisms for local and remote capturing and decapsulation of packets (CISCO ERSPAN and HP ERM are supported). It can be extended to support many types of packet-based traffic analysis by creating plug-ins and loading them in the main application. It includes many optimizations to ensure high performance traffic processing. Some of them are: multithreaded traffic processing; explicit thread pinning; configurable... -
13
pcapfix
repair corrupted pcap and pcapng files
this tool tries to repair your broken pcap and pcapng files by fixing the global header respectively packet blocks and recovering the packets by searching und guessing the packet headers or blocks -
14
netsnake-sniffer
Network sniffer which a similar to WireShark with sending own packets
...It has an ability to filter intercepted packets by source ip,source port, destination ip,destination port, type of protocol and length packets. It is possible to save a dump of captured packets in .pcap file extension for opening by WireShark software. Also,the main advantage of netsnake is sending your own network packets (ARP,TCP/IP,UDP) whith chosen parameters including payload data.which is byte array with max length = 1450 bytes. If your array of bytes has more 1450 bytes, it breaks into packages. My GitHub repository https://github.com/pavelinfsec2020/netsnake TUTORIAL you can watch in my videos: (EN) https://www.youtube.com/watch?... -
15
Eterscope traces graphs of specified traffic. It takes multiples tcpdump-like filters (using PCAP) and traces multitrack bandwidth graphs of the packets that match the specified filters on a network interface.
-
16
jNetPcap - A Libpcap Java Binding
A java PCAP and DPI library
A java wrapper for popular "libpcap" and "WinPcap" libraries. Accurate full API translation. Packet buffers delivered with no copies. Send custom packets, gather statistics. Comprehensive and easily extensible DPI engine. -
17
pcapdatacopy
Copy payload data from Wireshark .pcap files(s) to file
*** Require VB.Net Runtime 2.0 or higher *** If you need a quick way to dump the payload data from TCP/UDP packets in a wireshark capture file (.pcap), pcapdatacopy will meet your needs. Either an individual file or folder containing multiple files can be processed. In addition there are options available to define the IP header size and the offset in the payload data to start copying from. Version 1.7 (08/06/20) Needed to see timestamps on raw packet capture involving human readable content, new option added to create text file with timestamps and payload data Version 1.6 (17/02/2016) Added option to filter raw payload data based on packet type (TCP/UDP) Added function to create new wireshark .pcap from one or more input files. ... -
18
Xplico
Xplico is a Network Forensic Analysis Tool (NFAT)
Xplico is a Network Forensic Analysis Tool (NFAT). The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, MEGACO, RTP), IRC, WhatsApp... Xplico is able to classify more than 140 (application) protocols. Xplico cam be used as sniffer-decoder if used in "live mode" or in conjunction with netsniff-ng. Xplico is used also in CapAnalysis: http://www.capanalysis.net -
19
CapAnalysis
PCAP from another point of view
CapAnalysis is a web visual tool for information security specialists, system administrators and everyone who needs to analyze large amounts of captured network traffic. Analyze TCP and UDP streams Support multible datasets Perform deep packet inspection Support filtering capability Source Code: https://github.com/xplico/CapAnalysis -
20
ipgrep
Copies IP packets from source to destination PCAP files.
IPGREP is a command line tool to grep IP packets out of PCAP files. It provides basic filter for IP version and IP addresses. It is written in pure C without LIBPCAP, so it should run faster. -
21
PCAPAnalyzer
Network traffic analysis from PCAP format
PCAP Analyzer is a tool that helps analyzing network traffic captured in a PCAP format (standard of tcpdump). It has extensible Filters in charge of dissecting packets and printing information like throughput or anything that can be analyzed by Filters (e.g. packet loss, reordering, ...). It comes with several built-in Filters but can be expanded by adding custom-made Filters to the classpath. -
22
dynamips-MinGW
Dynamips on MinGW
...So far, I've been able to run things that I can run with the Cygwin version, and some of the broken features are on par. I've also been able to merge in the 'unstable' PowerPC core which can run things the 'stable' cannot. Transport wise, I've gotten it to talk with pcap and UDP. I have the groundwork to make it dynamic so that pcap isn't required to run it, so you can run dynamips without installing anything. I hope to add some different underlying networking connections. -
23
SSL Logger
Decrypts and logs a process's SSL traffic
...It attaches to a running process by name or PID and hooks SSL_read and SSL_write calls to capture plaintext data flowing through encrypted connections. Output can be streamed to the console with verbose metadata or written to a PCAP file for later analysis in standard tooling. The utility is powered by dynamic instrumentation using the Frida framework, allowing it to intercept function calls without recompiling or modifying the target binary. Typical workflows include debugging custom clients, validating protocol implementations, or inspecting troubleshooting traces when only an encrypted channel is available. ... -
24
PcapsE-OS X is a wrapper of tcpreplay directly integrated on Mac OS X Mavericks 10.9.3 for the execution of caps files that generate simulated malware traffic to test IDS Mac OS X based or redirecting simulated malware traffic on the interface of the IDS to other devices that perform correlation of events. Options:(1) Chat (2) Unix (3) Microsoft (4) Mac OS X (5) Network (6) DHCP (7) Firewalls (8) Routers (9) Proxy (10) Switches (11) HTTP (12) HTTPS (13) DNS (14) SW (15) Nessus (16) Tacacs+...
-
25
Sniffer4J
A java packet sniffer and forger that wraps pcap libs.
Sniffer4J is a java packet capture and manipulation tool that allows full analysis of a network. It is built upon pcap libs (winpcap, and libpcap) and can run in Windows and most Linux flavors. The current stable version (2.0) provides shared libraries (.dll and .SO) compiled and tested for both x86 and x64 architectures. Sniffer4J work’s by parsing packets in a comprehensive Pdu format. Each Pdu encapsulates the next one, making easy to navigate through the Frame.