Alternatives and similar repositories for ndff

Users that are interested in ndff are comparing it to the libraries listed below

• LibtraceTeam / libprotoident
  Network traffic classification library that requires minimal application payload
  ☆218Updated last year
• fmadio / pcap_flow
  calculate flow information from PCAP and extract tcp streams
  ☆72Updated last year
• outscale / packetgraph
  Packetgraph library is a collection of network bricks you can connect to form a network graph.
  ☆84Updated 6 months ago
• StamusNetworks / gophercap
  Accurate, modular, scalable PCAP manipulation tool written in Go.
  ☆96Updated last year
• DanieleDeSensi / peafowl
  High performance Deep Packet Inspection (DPI) framework to identify L7 protocols and extract and process data and metadata from network t…
  ☆130Updated 5 years ago
• kspviswa / dpi-enabled-ovs
  Extending OVS with DPI functionalities
  ☆17Updated 10 years ago
• irtimmer / bro-xdp_packet-plugin
  Plugin providing AF_XDP support for Bro.
  ☆14Updated 4 years ago
• LibtraceTeam / libtrace
  C Library for working with network packet traces
  ☆170Updated last month
• marty90 / DPDK-Replay
  This tool can replay a pcap capture at wire speed on several 10Gbps links.
  ☆70Updated 5 years ago
• sdnewhop / sdwannewhope
  SD-WAN security and insecurity
  ☆173Updated 5 years ago
• DCSO / fever
  fast, extensible, versatile event router for Suricata's EVE-JSON format
  ☆57Updated 2 months ago
• emmericp / FlowScope
  FlowScope is an oscilloscope for your network traffic. It records all traffic continuously in a ring buffer and dumps specific flows to d…
  ☆89Updated 7 years ago
• vipinpv85 / DPDK-Suricata_3.0
  add dpdk interface and packet processing to suricata in worker mode
  ☆64Updated 5 years ago
• mos-stack / mOS-networking-stack
  A Specialized Network Programming Library for Stateful Middleboxes:
  ☆105Updated 5 years ago
• DNS-OARC / dnscap
  Moved to https://codeberg.org/DNS-OARC/dnscap
  ☆293Updated last week
• thomasbhatia / opendpi-netfilter
  Netfilter kernel module for Deep Packet Inspection filtering
  ☆49Updated 7 years ago
• jeffsilverm / dpkt_doc
  Documentation, sample inputs, and sample programs that use the dpkt library
  ☆87Updated 9 years ago
• CAIDA / bgpstream
  BGP measurement analysis for the masses
  ☆123Updated 6 years ago
• radicallyopensecurity / anti-ddos
  DDOS Detection and Mitigation Appliance
  ☆68Updated 8 years ago
• pevma / SEPTun-Mark-II
  Suricata Extreme Performance Tuning guide - Mark II
  ☆121Updated 7 years ago
• gamelinux / prads
  Passive Real-time Asset Detection System
  ☆249Updated last year
• CESNET / Nemea
  System for network traffic analysis and anomaly detection.
  ☆92Updated 7 months ago
• ANSSI-FR / tabi
  BGP Hijack Detection
  ☆117Updated 7 years ago
• f18m / large-pcap-analyzer
  A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to …
  ☆113Updated 2 months ago
• dnstap / dnstap.pb
  flexible, structured event replication format for DNS servers (Protocol Buffers schema)
  ☆27Updated last year
• p4lang / scapy-vxlan
  A scapy clone, with support for additional packet headers
  ☆35Updated 4 years ago
• Netronome / libkefir
  Convert network filtering rules from various formats into BPF programs
  ☆68Updated 5 years ago
• zeek / spicy-analyzers
  Growing collection of Spicy-based protocol and file analyzers for Zeek
  ☆32Updated last year
• dodng / BeLibnids
  It is a platform to use multiprocess to combine dpdk and libnids together to support analyse packets in 10G port.
  ☆39Updated 11 years ago
• isginf / pcap-diff
  Diff two or more PCAP files
  ☆113Updated 4 years ago