tcpsplice by pyke369

high bandwidth for high-latency tcp connections

created at Sept. 13, 2016, 4:52 a.m.

1 +0

8 +0

4 +0

USBPcapOdinDumper.py by KOLANICH-tools

Some set of scripts to unpack odin packets into separate files !!! Migrated to Codeberg !!!

created at Oct. 25, 2017, 4:34 p.m.

3 +0

11 +0

3 +0

socket-sentry by rhasselbaum

Automatically exported from code.google.com/p/socket-sentry

created at May 30, 2015, 4:15 p.m.

3 +0

3 +0

1 +0

foremost by jonstewart

Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/

created at Jan. 10, 2013, 9:08 p.m.

3 +0

51 +0

6 +0

tcpsplit by pmcgleenon

split a pcap file into smaller files on TCP flow boundaries

created at Aug. 9, 2016, 2:08 p.m.

3 +0

7 +0

2 +0

ipsumdump by kohler

Ipsumdump and other programs for command-line network trace manipulation.

created at Jan. 26, 2013, 4:53 p.m.

6 +0

37 +0

10 +0

clj-net-pcap by ruedigergad

A wrapper/facade/whatever to enable/ease the use of jNetPcap (a libpcap based packet sniffing lib) in Clojure

created at Nov. 13, 2012, 8:13 p.m.

7 +0

67 +0

30 +0

YaraPcap by kevthehermit

Process HTTP Pcaps With YARA

created at June 29, 2013, 3:57 p.m.

11 +0

101 +0

25 +0

tcptrace by blitz

tcptrace is a tool written by Shawn Ostermann at Ohio University, for analysis of TCP dump files.

created at Jan. 4, 2012, 1:42 p.m.

12 +0

77 +0

26 +0

http-sniffer by caesar0301

A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.

created at Dec. 1, 2012, 9:58 a.m.

12 +0

187 +0

51 +0

PacketStreamer by deepfence

Distributed tcpdump for cloud native environments

created at March 25, 2022, 2:31 p.m.

12 +0

1,887 +2

251 +0

OpenFPC by leonward

OpenFPC, Open Source Full Packet Capture

created at Aug. 12, 2014, 1:49 p.m.

13 +0

71 +0

10 +0

pkt2flow by caesar0301

A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flow classification, it's so common to analyze the feature of one specific flow. I have make the attempt to use made-ready tools like tcpflows, tcpslice, tcpsplit, but all these tools try to either decrease the trace volume (under requirement) or resemble the packets into flow payloads (over requirement). I have not found a simple tool to classify the packets into flows without further processing. This is why this program is born.

created at Dec. 20, 2012, 1:17 p.m.

13 +0

166 +0

46 +0

pcapfex by vikwin

'Packet Capture Forensic Evidence eXtractor' is a tool that finds and extracts files from packet capture files

created at Nov. 5, 2015, 1:47 p.m.

19 +0

214 +0

41 +0

potiron by CIRCL

Potiron - Normalize, Index and Visualize Network Capture

created at Aug. 27, 2014, 7:46 a.m.

19 +0

83 +0

20 +0

Chaosreader by brendangregg

An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data

created at April 10, 2014, 12:56 a.m.

20 +0

224 +0

49 +0

pcap2har by andrewf

A convertor from .pcap network capture files to HTTP Archive files.

created at July 19, 2010, 11 p.m.

25 +0

238 +1

68 +0

yaraprocessor by MITRECND

Yara is awesome, but sometimes you need to manipulate the data streams you're scanning in different ways.

created at Jan. 10, 2013, 6:49 p.m.

26 +0

97 +0

11 +0

PacketQ by DNS-OARC

A tool that provides a basic SQL-frontend to PCAP-files

created at Feb. 7, 2011, 3:29 p.m.

28 +0

395 +0

57 +0

nfstream by nfstream

NFStream: a Flexible Network Data Analysis Framework.

created at Oct. 18, 2019, 3:14 p.m.

29 +1

1,090 +2

122 +0