Pcap GitHub Repositories

Comfortably monitor your network traffic 🕵️‍♂️

Scapy: the Python-based interactive packet manipulation program & library.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

fq - jq for binary formats. Tool, language and decoders for working with binary formats.

A terminal UI for tshark, inspired by Wireshark

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

No-root network monitor, firewall and PCAP dumper for Android

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Network Analysis Tool

the TCPdump network dissector

the LIBpcap interface to various kernel packet capture mechanism

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

An open source real-time network topology and protocols analyzer

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

Small tool to capture packets from wlan devices.

An AI-enabled NAT Router/Firewall for the ESP32

HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring

High-level, multiplatform C++ network packet sniffing and crafting library.

:snowflake: PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

Packages and utilities for network booting

Edit and replay captured network traffic at arbitrary speeds — a suite of pcap tools for *NIX and Windows.

Secure multithreaded packet sniffer

Process-aware, eBPF-based tcpdump

NFStream: a Flexible Network Data Analysis Framework.

Ncurses SIP Messages flow viewer

Ferries Packets Across Forbidden Boundaries 👀