Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Documentation for Zeek

Comfortably monitor your Internet traffic 🕵️‍♂️

Convert pcap files into richly-typed ZNG summary logs (Zeek, Suricata, and more)

Ingesting, pipelining, and enhancing your DNS logs with usage indicators, security analysis, and additional metadata.

Open source security data pipelines.

Process-aware, eBPF-based tcpdump

A network forensics and sniffer tool

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

PCAP Raider - PCAP Analysis CLI Tool

Scapy: the Python-based interactive packet manipulation program & library.

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

No-root network monitor, firewall and PCAP dumper for Android

Visualization software designed to explore large amouts of data. (this is the read-only mirror of https://gitlab.com/squey/squey)

Container terminal application for intercepting packets within pod/namespace using Scapy and ttyd terminal

Fluere is a powerful and versatile tool designed for network monitoring and analysis. It is capable of capturing network packets in pcap format and converting them into NetFlow data, providing a comprehensive view of network traffic. It also Provides Terminal User Interface.

HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring

Slips, a free software behavioral Python intrusion prevention system (IDS/IPS) that uses machine learning to detect malicious behaviors in the network traffic. Stratosphere Laboratory, AIC, FEL, CVUT in Prague.

A lightweight HTTP protocol debugger

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.