trisulnsm / bitmaul
A Lua helper library for creating network protocol dissectors
☆13Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for bitmaul
- flexible, structured event replication format for DNS servers (Protocol Buffers schema)☆24Updated 8 months ago
- Engine for capturing, parsing and replaying DNS☆57Updated 2 weeks ago
- Kafka connector to sync Zed lakes to and from Kafka topics☆18Updated 5 months ago
- suricata eve.json parser in Go☆14Updated 5 years ago
- A Spicy protocol analyzer for WireGuard☆28Updated 4 years ago
- Yara powered NIDS with high speed packet capture powered by PF_RING☆66Updated 6 months ago
- A library implementing a generic SQL like query language.☆20Updated this week
- Plugin providing AF_XDP support for Bro.☆14Updated 3 years ago
- INACTIVE - http://mzl.la/ghe-archive - Zeek Extreme Performance Tuning☆26Updated 5 years ago
- High performance time ordered PCAP merging utility☆22Updated 2 years ago
- A pure Go library for working with Structured Threat Information Expression (STIX™) version 2.x data☆23Updated last month
- Meer is a "spooler" for Suricata / Sagan.☆28Updated last year
- automatic enumeration and maintenance of Suricata monitoring interfaces☆11Updated 4 years ago
- Collect autorun records from running system☆59Updated 2 years ago
- Accurate, modular, scalable PCAP manipulation tool written in Go.☆85Updated 6 months ago
- reference dnstap decoding utility☆20Updated last year
- Firepit - STIX Columnar Storage☆15Updated 5 months ago
- GQUIC Protocol Analyzer for Zeek (Bro) Network Security Monitor☆76Updated last year
- A golang JSON canonicalization scheme library based on RFC 8785☆19Updated last year
- This repo aims to offer a packet flow tracer based on bpf☆13Updated 5 years ago
- Zeek package for tracking long connections to report them before they have completed.☆29Updated 2 years ago
- Zeek support for Community ID flow hashing.☆34Updated last year
- Argus clients program repo☆18Updated this week
- Meer (GPLv2) is a dedicated "spooler" for the Suricata & Sagan EVE output formats.☆23Updated 3 years ago
- Dynamic Outbound Firewall Authorizer☆21Updated 2 years ago
- A tiny high-performance UDP proxy that can forward traffic to one or more endpoints.☆19Updated 2 years ago
- fast, extensible, versatile event router for Suricata's EVE-JSON format☆50Updated 4 months ago
- Sighting DB is designed to scale writing and reading a count of attributes, tracking when if was first and last seen☆16Updated 7 months ago