cisco / mercury
Mercury: network metadata capture and analysis
☆434Updated 3 weeks ago
Related projects: ⓘ
- A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.☆1,300Updated 5 months ago
- Network traffic classification library that requires minimal application payload☆206Updated last month
- Transparent SSL/TLS proxy for decrypting and diverting network traffic to other programs, such as UTM services, for deep SSL inspection☆384Updated last week
- Application layer protocol identification of traffic flows☆211Updated last year
- Suricata and Snort IDS rule and pcap testing system☆435Updated last week
- gonids is a library to parse IDS rules, with a focus primarily on Suricata rule compatibility. There is a discussion forum available that…☆179Updated last year
- a network packet capture compiler☆191Updated 2 years ago
- LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces.☆288Updated last month
- Python rewrite of passive OS fingerprinting tool☆144Updated 2 months ago
- SSL/TLS layers for scapy the interactive packet manipulation tool☆417Updated 2 years ago
- TLS Fingerprinting☆374Updated 3 years ago
- Visualize network topologies and collect graph statistics based on pcap files☆335Updated last year
- p0f unofficial git repo☆464Updated 5 years ago
- Mirror of https://github.com/zeek/zeek☆164Updated last year
- ZMapv6: Internet Scanner with IPv6 capabilities☆101Updated 5 months ago
- HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints…☆529Updated 6 months ago
- Suspicious DGA from PDNS and Sandbox.☆181Updated 2 years ago
- The tool for updating your Suricata rules.☆250Updated 2 months ago
- idstools: Snort and Suricata Rule and Event Utilities in Python (Including a Rule Update Tool)☆273Updated 10 months ago
- FATT /fingerprintAllTheThings - a pyshark based script for extracting network metadata and fingerprints from pcap files and live network …☆650Updated 10 months ago
- nPrint provides a generalizable data representation for network packets that works directly with machine learning techniques☆101Updated 2 years ago
- SI6 Networks' IPv6 Toolkit☆254Updated last year
- virtual honeypots☆342Updated last year
- System for network traffic analysis and anomaly detection.☆84Updated last month
- NFStream: a Flexible Network Data Analysis Framework.☆1,075Updated last month
- Argus Sensor☆47Updated this week
- dpdk infrastructure for software acceleration. Currently working on RX and ACL pre-filter☆89Updated 3 years ago
- A simple utility to classify packets into flows. It's so simple that only one task is aimed to finish. For Deep Packet Inspection or flo…☆165Updated last year
- Netflow processing tools☆771Updated last week
- A fast parser for DNS pcap data.☆70Updated 7 years ago