Alternatives and similar repositories for python-PCAP-Analysis

Users that are interested in python-PCAP-Analysis are comparing it to the libraries listed below

• cslev / pcap_generator
  This application generates PCAP files from CSV files using low-level Python tools
  ☆25Updated last year
• shramos / pcap-splitter
  Pcap-splitter allows you to split a pcap file into subsets of pcap files based on sessions, flows, ip addresses, number of bytes, number …
  ☆67Updated 6 years ago
• StamusNetworks / suricata-4-analysts
  The Security Analyst’s Guide to Suricata
  ☆60Updated 7 months ago
• mmguero-dev / Malcolm-PCAP
  This repository has been archived in favor of https://github.com/idaholab/Malcolm-Test-Artifacts
  ☆37Updated last year
• tumi8 / QScanner
  ☆26Updated last year
• thongsia / Public-Pcaps
  ☆64Updated 7 years ago
• COSSAS / dgad
  DGA Detective - Hunt domains generated by Domain Generation Algorithms to identify malware traffic
  ☆45Updated last year
• nprint / nprint
  nPrint provides a generalizable data representation for network packets that works directly with machine learning techniques
  ☆121Updated 2 weeks ago
• stanford-esrg / gps
  GPS is a scanning platform that learns and predicts the location of IPv4 services across all 65K ports.
  ☆77Updated 2 years ago
• H21lab / tsharkVM
  tshark + ELK analytics virtual machine
  ☆69Updated 10 months ago
• JarryShaw / PyPCAPKit
  Python-based Comprehensive Network Packet Analysis Library
  ☆258Updated this week
• tklab-tud / ID2T
  Official ID2T repository. ID2T creates labeled IT network datasets that contain user defined synthetic attacks.
  ☆64Updated 2 years ago
• stratosphereips / zeek_anomaly_detector
  A completely automated anomaly detector Zeek network flows files (conn.log).
  ☆82Updated 4 months ago
• klingerko / nids-rule-library
  Collection of various open-source an commercial rulesets for NIDS (especially for Suricata and Snort)
  ☆29Updated 2 years ago
• fatemabw / kyd
  DHCP Fingerprinting
  ☆31Updated 5 years ago
• NumLocK15 / YaraStation
  Yara station is a management portal for Neo23x0-Loki. The mission is to transform the standalone nature of the Loki scanner into a centra…
  ☆36Updated 3 years ago
• sandialabs / gait
  Zeek Extension to Collect Metadata for Profiling of Endpoints and Proxies
  ☆37Updated 3 months ago
• NLADC / dissector
  Software responsible for extracting DDoS Fingerprints from traffic captures.
  ☆70Updated 5 months ago
• fmadio / pcap_flow
  calculate flow information from PCAP and extract tcp streams
  ☆70Updated last year
• fkie-cad / amides
  An Adaptive Misuse Detection System
  ☆46Updated last year
• amzn / zeek-plugin-enip
  Zeek network security monitor plugin that enables parsing of the Ethernet/IP and Common Industrial Protocol standards
  ☆46Updated last year
• StopDDoS / packet-captures
  packet captures of real-world ddos attacks
  ☆165Updated 2 months ago
• OISF / suricata-verify
  Suricata Verification Tests - Testing Suricata Output
  ☆117Updated last week
• m-chrome / py-suricataparser
  Pure python parser for Snort/Suricata rules.
  ☆33Updated last year
• StamusNetworks / suricata-language-server
  Suricata Language Server is an implementation of the Language Server Protocol for Suricata signatures. It adds syntax check, hints and au…
  ☆84Updated this week
• PaloAltoNetworks / pyjarm
  pyJARM is a library for doing JARM fingerprinting using python
  ☆50Updated 8 months ago
• OISF / suricata-intel-index
  Suricata rule and intel index
  ☆33Updated last month
• certego / PcapMonkey
  PcapMonkey will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.
  ☆159Updated 8 months ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆31Updated last year
• amzn / zeek-plugin-s7comm
  Zeek network security monitor plugin that enables parsing of the S7 protocol
  ☆41Updated last year