Alternatives and similar repositories for libnids

Users that are interested in libnids are comparing it to the libraries listed below

• ebradbury / linux-syscall-hooker
  A Linux kernel module that locates the system call table in memory and hooks uname. Contributions welcome!
  ☆58Updated 12 years ago
• dodng / BeLibnids
  It is a platform to use multiprocess to combine dpdk and libnids together to support analyse packets in 10G port.
  ☆38Updated 10 years ago
• honeynet / sebek
  ☆25Updated 12 years ago
• tombkeeper / DEP-and-ASLR-bypass-without-ROP-or-JIT
  Slides, codes and videos of the talk "DEP/ASLR bypass without ROP/JIT" on CanSecWest 2013
  ☆49Updated 12 years ago
• iSECPartners / libshambles
  A library for efficient interception of established TCP connections
  ☆19Updated 9 years ago
• cloudsec / exploit
  Some kernel exploit i wrote
  ☆76Updated 10 years ago
• FredrikAppelros / pcap-reassembler
  Reassembles UDP/TCP packets into application layer messages.
  ☆42Updated 7 years ago
• kfiros / execmon
  Advanced process execution monitoring utility for linux (procmon like)
  ☆85Updated 9 years ago
• hanj4096 / wukong
  A LKM rootkit for Linux kernel 2.6.x, 3.x and 4.x
  ☆43Updated 9 years ago
• ewust / forge_socket
  Linux kernel module for inspecting/modifying TCP socket state from user space
  ☆92Updated 2 years ago
• caesar0301 / http-sniffer
  A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to …
  ☆190Updated this week
• sch3m4 / libntoh
  User-friendly C Library to perform TCP streams reassembly and IPv4/6 defragmentation
  ☆109Updated 7 years ago
• citypw / citypw-SCFE
  sample code for educate myself-_-
  ☆43Updated 9 years ago
• plashchynski / libdssl
  DSSL library: network capture and SSL decryption toolkit
  ☆25Updated 5 years ago
• ax330d / pvt
  PHP extension for web-application dynamic analysis.
  ☆27Updated 6 years ago
• shengnoah / riff
  一个基于lua插件的pcap监控工具。
  ☆27Updated 7 years ago
• google / linux-sensor
  ☆32Updated 9 years ago
• freewaf / waf-pe
  Open Source Web Application Firewall Protection Engine
  ☆62Updated 11 years ago
• k33nteam / cc-shellcoding
  ☆92Updated 10 years ago
• plashchynski / viewssld
  viewssld is a free, open source, non-terminating SSLv2/SSLv3/TLS traffic decryption daemon for Snort, and other Network Intrusion Detecti…
  ☆74Updated 7 years ago
• m0hamed / lkm-rootkit
  A rootkit implemented as a linux kernel module
  ☆17Updated 10 years ago
• xti9er / rootkit_checker
  --= Xt9 - Anti - Rootkit =-- beta v0.11 by xti9er
  ☆15Updated 4 years ago
• MITRECND / libnids
  libnids
  ☆112Updated last year
• dudeintheshell / blackhole
  ☆37Updated 10 years ago
• rsabir / bro-dsniff
  A dsniff project using bro
  ☆10Updated 9 years ago
• robertdavidgraham / packetdump
  A packet-sniffer for 10gig networks that writes to compressed files. I created this because
  ☆27Updated 8 years ago
• maK- / Syscall-table-hijack-LKM
  This demonstrates the hijacking of the "write" system call and how to set the System Call table to read/write mode via modifying the corr…
  ☆19Updated 11 years ago
• rsmmr / hilti
  **NOTE**: This is outdated and no longer maintained. There's a new version at https://github.com/zeek/spicy.
  ☆40Updated 7 years ago
• wallarm / libdetection
  Signature-free approach library to detect injection and commanding attacks
  ☆94Updated 3 years ago
• pellegre / libcrafter-examples
  You can find *a lot* of libcrafter code right over here
  ☆52Updated 7 years ago