Alternatives and similar repositories for tcpsession

Users that are interested in tcpsession are comparing it to the libraries listed below

• caesar0301 / pcapdpi
  Using nDPI/openDPI to detect flow protocols from a PCAP file or live NIC. This program was modified from example in nDPI and I added a pe…
  ☆23Updated 9 years ago
• fatemabw / kyd
  DHCP Fingerprinting
  ☆28Updated 4 years ago
• H21lab / json2pcap
  Script for pcap modification, reconstruction and anonymization
  ☆19Updated 6 months ago
• eCrimeLabs / cratos-fastapi
  The CRATOS proxy API integrates with your MISP instance and allows to extract indicators that can be consumed by security components such…
  ☆13Updated 2 months ago
• EmergingThreats / IDSDeathBlossom
  IDS Utility Belt For Automating/Testing Various Things
  ☆30Updated 4 years ago
• OISF / suricata-trafficid
  Application and service identification rules for Suricata
  ☆18Updated 2 years ago
• D4-project / analyzer-d4-passivedns
  A Passive DNS backend and collector
  ☆31Updated 2 years ago
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆27Updated 5 years ago
• iAbdullahMughal / dscan
  D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit
  ☆29Updated 6 months ago
• hdm / mac-tracker
  Historical Tracking of MAC Address Assignments
  ☆30Updated this week
• CERT-Polska / mwdblib
  Client library for the mwdb service by CERT Polska.
  ☆40Updated 6 months ago
• felixe / idsEventGenerator
  aka GENESIDS: Reads and parses rules using a "snort like" syntax and generates and sends packets that trigger events in signature based I…
  ☆22Updated 6 years ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆53Updated last month
• kholia / my-pcaps
  My Packet Captures, Quagga Tutorial, and Cisco Reversing.
  ☆27Updated 6 years ago
• armedpot / honeytrap
  Last download from git://git.carnivore.it/honeytrap.git of Honytrap by Tillmann Werner
  ☆43Updated 3 years ago
• SekoiaLab / FastIR_Agent
  FastIR Agent is a Windows service to execute FastIR Collector on demand
  ☆14Updated 8 years ago
• faucetsdn / network-tools
  Network Tools
  ☆32Updated last year
• CrySyS / bro-step7-plugin
  A proof of concept implementation of the Siemens S7 protocol analyser for the Bro IDS.
  ☆16Updated 8 years ago
• Cymmetria / ciscoasa_honeypot
  A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
  ☆52Updated 6 years ago
• hashlookup / PyHashlookup
  Python CLI and module for CIRCL hash lookup
  ☆12Updated 4 months ago
• woanware / bgp-watcher
  Prototype system to monitor BGP routes and alert when anomalies are identified
  ☆15Updated 6 years ago
• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆29Updated 4 years ago
• johnbergbom / PeddleCheap
  Pcaps for PeddleCheap and implant communication + script for interpreting and decrypting pcaps.
  ☆15Updated 7 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆30Updated 5 years ago
• D4-project / d4-core
  D4 core software (server and sample sensor client)
  ☆42Updated last year
• satta / gommunityid
  Go implementation of the Community ID flow hashing standard
  ☆20Updated last month
• olliencc / WinBinaryAudit
  GSAudit at Symantec, ExeAudit at RIM, RECX Binary Assurance for Windows at Recx etc. - core library now WinBinaryAudit
  ☆24Updated 9 years ago
• embedi / cisco_tools
  Main repository to pull all Cisco related projects.
  ☆15Updated 7 years ago
• avuko / kathe
  A GUI/REST interface to find similarities in large sets (think: binaries). Based on ssdeep.
  ☆20Updated 3 years ago
• telekom-security / misp-warning-lists
  ☆28Updated this week