fmadio / pcap_merge

Related projects: ⓘ

• theparanoids / spicy-noise
  A Spicy protocol analyzer for WireGuard
  ☆27Updated 4 years ago
• grigorescu / binpac_quickstart
  ☆20Updated 2 years ago
• zeek / time-machine
  Time-Machine Dynamic Bulk Packet Recorder
  ☆35Updated 8 months ago
• JustinAzoff / flow-indexer
  Flow-Indexer indexes flows found in chunked log files from bro,nfdump,syslog, or pcap files
  ☆44Updated 4 months ago
• corelight / zeek-community-id
  Zeek support for Community ID flow hashing.
  ☆32Updated last year
• beave / meer
  Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.
  ☆23Updated 3 years ago
• jordan2175 / rewritecap
  Tool for rebasing a PCAP file and editing layer2 and layer 3 addresses
  ☆16Updated 3 years ago
• zeek / package-manager
  A package manager for Zeek
  ☆42Updated last week
• ncsa / bro-doctor
  ☆23Updated 4 years ago
• irtimmer / bro-xdp_packet-plugin
  Plugin providing AF_XDP support for Bro.
  ☆14Updated 3 years ago
• rocknsm / docket
  A RESTful API frontend for Stenographer
  ☆54Updated last year
• D4-project / d4-core
  D4 core software (server and sample sensor client)
  ☆43Updated 8 months ago
• MISP / misp-rfc
  Specifications used in the MISP project including MISP core format
  ☆45Updated 2 months ago
• ncsa / bro-simple-scan
  ☆15Updated 5 months ago
• mozilla / zept
  INACTIVE - http://mzl.la/ghe-archive - Zeek Extreme Performance Tuning
  ☆25Updated 4 years ago
• socprime / SigmaRulesIntegration
  ☆15Updated 6 years ago
• corelight / zerologon
  Zeek package to detect Zerologon
  ☆11Updated 2 years ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆32Updated this week
• MITRECND / bro-http2
  Plugin for Zeek/Bro which provides http2 decoder/analyzer
  ☆30Updated 3 months ago
• taterhead / PCAP-Index
  Set of scripts to index PCAP files and retrieve packets
  ☆14Updated 9 years ago
• zeek / zeek-agent-framework
  This project is no longer maintained. There's a successor at https://github.com/zeek-packages/zeek-agent-v2
  ☆14Updated 3 years ago
• corelight / conn-burst
  A Bro package to identify connections that are bursting (lots of data and transferring quickly).
  ☆12Updated 3 years ago
• CIRCL / potiron
  Potiron - Normalize, Index and Visualize Network Capture
  ☆83Updated 5 years ago
• mmguero-dev / Malcolm-PCAP
  A set of PCAPs used to test the parsers used by Malcolm. Also, a curated list of PCAP collections I've found online.
  ☆30Updated last month
• threatstream / symhash
  ☆35Updated last year
• fireeye / brocapi
  Bro PCAP Processing and Tagging API
  ☆27Updated 6 years ago
• micrictor / smbfp
  Zeek package to generate a SMB client fingerprint
  ☆26Updated 4 years ago
• zeek / zeek-netcontrol
  Connectors for the Zeek NetControl framework
  ☆19Updated 2 years ago
• corelight / json-streaming-logs
  Bro script package to create JSON formatted logs to stream into data analysis systems.
  ☆27Updated 9 months ago
• corelight / pycommunityid
  A Python implementation of the Community ID flow hashing standard
  ☆23Updated 9 months ago