Search Results for "pcap" - Page 2

pcapAnalyst.sh is a shell script that relies on open-source tool to analyze a pcap file and produce a summary report. It is meant to provide a quick overview of what is running on your network and flag potential security threats

...STDIN is recorded as port 19840, STDOUT as port 19841, STDERR as port 19842 and debug information as port 65535. The captured data is recorded in a file which can be read by network analyzing tools capable of parsing PCAP files.

KaTaLyzer is network traffic analyzer which offers full network communication monitoring through graphs of protocols traffic for all communicating nodes or for choosen node (based on IP or MAC address). See more at katalyzer.sk

Common network dump analyzer tool to extract application data and pretty show. It reassembles and shows HTTP/SMTP/POP3/IMAP etc files. Please donate if you want this to be a candy.

The goal of Xplico is to extract the applications data from an Internet traffic capture. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP), and so on. NFAT

Passive Proxy Daemon (pproxyd) has moved to GitHub (https://github.com/rondilley/pproxyd ) This tool reads pcap format files or reads packets directly from the network, assembles web based traffic and generates squid proxy style logs.

...Once it comes online it will keep tabs on the device and after a certain time out period it will run the script with the stop argument. ARP Scout monitors either the Linux Proc file system for changes in the the ARP cache or will use PCAP to watch for new MAC and IP address combinations. See the README file for more details. Note: Last updated on November 27th, 2011 See the CHANGE file for details. The last change was a small bug fix and tested on OS X.

This is a very simple utility to fix PCAP files that have duplicated traffic from span ports and the like. It uses the IP ID field to identify any duplicates based on source/destination that have appeared in the last 10 packets for that flow.

Ruby interface for libpcap packet capture library

DEPRECATED! Project is now hosted on GITHUB Monitors conspicuous activity on the net. Consists of a daemon watching for incoming packets and a client for user desktop notifications. Being coded in python and ubuntu compat.

pcapsplit is able to split pcap files into several smaller pieces. This split can be performed by several different features. E.g. it is able to split a pcap file into smaller pcap files according to the desired file size or type of traffic.

"framegen" construct packets based on the arguments passed at the command line. It can also replay packets present in a pcap file and can also save packets received at the listening port into a pcap file. Requires: PCAP library.

Generate NetFlow-like statistics from PCAP inputs. FAST and customizable framework for aggregating network statistics. Project was intended to provide a fast way to aggregate traffic information on a network with 700-900Mbit/s average traffic.

Tiet reads pcap(3) or argus(8) routing protocol traces (ISIS for now) and analyzes the protocol state/behavior. The obtained metrics & graphics can by used for many auditing tasks, e.g. detection of misconfiguration, bugs or performance problems.

Yconalyzer is a low-overhead pcap utility that provides a bird's eye view of traffic on a particular TCP port, displaying a distribution of duration, volume and throughput over all connections while being able to narrow down to a connection as well.

It is a Perl script which takes a PCAP file as input and identifies valid subnets in the same. It then assumes a netmask of /24 and searches all those subnets for live IP's. It then groups all the IP addresses based on the number of hops.

PERL script and required environment to easily use the Afterglow software (http://afterglow.sourceforge.net/ Copyright (c) 2006 Raffael Marty) by listing the packet captures to visualize or by specifying a directory that contains the packet captures.

A proof-of-concept application of the Statistical Protocol IDentification (SPID) algorithm. SPID can detect the application layer protocol (layer 7) by analysing flow (packet sizes etc.) and payload statistics (byte values etc.) from pcap files.

Conchart is a tool to visualise the timing of network connections. It reads a pcap file to generate an SVG file. It will show the send and received data as coloured areas which will allow an aid in network troubleshooting.

TNV visualizes pcap data to graphically depict network packets, links, and ports for network traffic analysis to facilitate learning what constitutes 'normal' behavior, investigating security events, or network troubleshooting.

PktTap is a high performance Linux network socket which is optimized for use by packet monitoring applications. It offers a simple API similar to pcap, supports efficient filtering of UDP and TCP traffic, and provides flexible packet buffer management.

ipband a pcap based traffic monitor. It tallies per-subnet traffic and bandwidth usage and starts detailed logging if specified threshold for the specific subnet is exceeded.

pcap-sharp is a CLI wrapper around libpcap, giving managed languages like C#, VB.NET, and Boo the ability to capture network traffic in real-time.

Security Analyst Network Connection Profiler [sancp] is a network security tool designed to create connection logs and record network traffic for the purpose of auditing, historical analysis, and network activity discovery.

Streamline is a pipelined I/O subsystem for both kernel and application processing on Linux, with 40+ filters for pattern matching, stream reassembly, compression, etc. It exports the pipes, sockets, and pcap interfaces and uses shared memory to reduce I