joy by cisco

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

created at Jan. 8, 2016, 8:30 p.m.

112 -1

1,308 +0

329 +0

BruteShark by odedshimon

Network Analysis Tool

created at Feb. 16, 2020, 8:58 p.m.

97 +0

3,025 +4

333 +1

PcapPlusPlus by seladb

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

created at Oct. 7, 2014, 9:04 p.m.

95 +0

2,742 +4

675 +3

tcpflow by simsong

TCP/IP packet demultiplexer. Download from:

created at April 1, 2012, 12:44 a.m.

79 +0

1,686 +1

237 +0

libnet by libnet

A portable framework for low-level network packet construction

created at Feb. 19, 2009, 12:11 a.m.

74 +1

907 +0

257 +1

usbpcap by desowin

USB packet capture for Windows

created at Feb. 23, 2013, 10:47 p.m.

73 +0

926 +2

173 +0

chopshop by MITRECND

Protocol Analysis/Decoder Framework

created at Sept. 18, 2012, 5:51 p.m.

71 +0

489 +0

112 +0

CapTipper by omriher

Malicious HTTP traffic explorer

created at Jan. 13, 2015, 9:05 a.m.

63 +0

711 +1

159 +0

sharppcap by dotpcap

Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets

created at May 27, 2015, 1:53 p.m.

59 +0

1,352 +6

267 +0

tcpreplay by appneta

Pcap editing and replay tools for *NIX and Windows - Users please download source from

created at Nov. 20, 2013, 1:10 a.m.

51 +0

1,192 +1

269 +0

dpkt by kbandla

fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols

created at June 6, 2012, 6:39 p.m.

51 +0

1,096 +1

271 +0

PCAPdroid by emanuele-f

No-root network monitor, firewall and PCAP dumper for Android

created at Jan. 6, 2020, 6:11 p.m.

45 +0

2,413 +21

285 +1

scalpel by sleuthkit

Scalpel is an open source data carving tool. It is not being actively maintained.

created at June 27, 2013, 4:59 p.m.

44 +0

627 +0

99 +0

hadoop-pcap by RIPE-NCC

Hadoop library to read packet capture (PCAP) files

created at Oct. 2, 2011, 12:59 p.m.

40 +0

208 +0

100 +0

libcrafter by pellegre

A high level C++ network packet sniffing and crafting library.

created at Oct. 29, 2012, 2:24 a.m.

34 +0

300 +1

88 +0

cloud-probe by Netis

A Software Probe for network packet capturing and forwarding in Cloud/Kubernetes and Virtualized environment.

created at June 22, 2018, 10:08 a.m.

31 +0

958 +1

171 +0

PacketQ by DNS-OARC

A tool that provides a basic SQL-frontend to PCAP-files

created at Feb. 7, 2011, 3:29 p.m.

28 +0

395 +0

57 +0

nfstream by nfstream

NFStream: a Flexible Network Data Analysis Framework.

created at Oct. 18, 2019, 3:14 p.m.

27 +0

1,085 +3

121 +1

yaraprocessor by MITRECND

Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.

created at Jan. 10, 2013, 6:49 p.m.

26 +0

97 +0

11 +0

pcap2har by andrewf

A convertor from .pcap network capture files to HTTP Archive files.

created at July 19, 2010, 11 p.m.

25 +0

237 +0

68 +0