pcap

Comfortably monitor your network traffic 🕵️‍♂️

Scapy: the Python-based interactive packet manipulation program & library.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

fq - jq for binary formats. Tool, language and decoders for working with binary formats.

A terminal UI for tshark, inspired by Wireshark

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

No-root network monitor, firewall and PCAP dumper for Android

Network Analysis Tool

the TCPdump network dissector

the LIBpcap interface to various kernel packet capture mechanism

A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).