assafmo / joincap
Merge multiple pcap files together, gracefully.
☆211Updated last week
Related projects ⓘ
Alternatives and complementary repositories for joincap
- PassiveDNS in Go☆122Updated 5 years ago
- Golang IPv6 address enumeration☆356Updated 5 years ago
- Passive DNS collection using Zeek☆181Updated last year
- Ready to run scripts for network analysis☆84Updated 2 months ago
- An open standard for hashing network flows into identifiers, a.k.a "Community IDs".☆171Updated 2 months ago
- Internet data acquisition☆147Updated 3 years ago
- A Distributed, Search-Optimized Full Packet Capture System☆240Updated last year
- A lightweight tool to score network traffic and flag anomalies☆122Updated 3 months ago
- HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…☆533Updated 8 months ago
- Zeek IDS Dockerfile☆99Updated last year
- a network packet capture compiler☆194Updated 2 years ago
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆180Updated last year
- Wireshark plugin to display Suricata analysis info☆91Updated 3 years ago
- Utility for annotating Internet datasets with contextual metadata (e.g., origin AS, MaxMind GeoIP2, reverse DNS, and WHOIS)☆95Updated 2 years ago
- Generic Low Interaction Honeypot☆245Updated last week
- Automatic firewall rule orchestator.☆82Updated 7 years ago
- Passive Real-time Asset Detection System☆232Updated 5 months ago
- SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels☆109Updated 6 years ago
- Web service for scanning pcaps with snort☆108Updated 6 years ago
- Suricata Extreme Performance Tuning guide☆204Updated 6 years ago
- ☆167Updated 3 years ago
- How to Zeek Sysmon Logs!☆101Updated 2 years ago
- use ambiguous HTTP to circumvent security systems☆94Updated last year
- Virustotal API for Go☆63Updated 5 years ago
- The Official Github Repository of Daemonlogger☆20Updated 3 years ago
- viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…☆74Updated 7 years ago
- Network capture utility designed specifically for DNS traffic☆278Updated last week
- This project is no longer maintained. There's a successor at https://github.com/zeek/zeek-agent-v2☆124Updated 4 years ago