TCPDump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. It prints out a description of the contents of packets on a network interface that match the boolean expression. The Packet Capture library provides a high level interface to packet capture systems. All packets on the network, even those destined for other hosts, are accessible through this mechanism.   

TCPDump -  Network Packet Analyzer

Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, *BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as
packet capture and filtering libraries.
 
Its features include:
<ul>
 <li>Deep inspection of hundreds of protocols, with more being added all the time</li>
 <li>Live capture and offline analysis</li>
 <li>Standard three-pane packet browser</li>
 <li>Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many others</li>
 <li>Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility</li>
 <li>The most powerful display filters in the industry</li>
 <li>Rich VoIP analysis</li>
 <li>Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others</li>
 <li>Capture files compressed with gzip can be decompressed on the fly</li>
 <li>Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)</li>
 <li>Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2</li>
 <li>Coloring rules can be applied to the packet list for quick, intuitive analysis</li>
 <li>Output can be exported to XML, PostScript®, CSV, or plain text</li>
 </ul>

Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, *BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as
packet capture and filtering libraries.

Wireshark - Network Traffic Analyzer

AIEngine is a packet inspection engine with capabilities of learning without any human intervention. AIEngine helps network/security profesionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on or use them on the engine automatically. 
 
The main functionalities of AIEngine are: 
<UL>
	<LI>Support for PCRE JIT for regex matching.
	<LI>Support three types of NetworkStacks(lan,mobile and ipv6)
 <LI>Support Sets and Bloom filters for IP searches.
 <LI>Support Linux and FreeBSD operating systems.
 <LI>Support for HTTP,DNS and SSL Domains matching.
 <LI>Support for banned domains and hosts for HTTP, DNS and SSL
 <LI>Frequency analisys for unknown traffic and auto-regex generation.
 <LI>Easy integration with databases (MySQL, Redis, etc...)
		
 </UL>

AIEngine is a packet inspection engine with capabilities of learning without any human intervention. AIEngine helps network/security profesionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on or use them on the engine automatically. 

AiEngine - Packet Inspection Engine

netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. 
 
 netsniff-ng is a fast network analyzer based on packet mmap(2) mechanisms. It can record pcap files to disc, replay them and also do an offline and online analysis. Capturing, analysis or replay of raw 802.11 frames are supported as well. pcap files are also compatible with tcpdump or Wireshark traces. netsniff-ng processes those pcap traces either in scatter-gather I/O or by mmap(2) I/O.

 netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. 

netsniff-ng - The packet sniffing beast

Discover open source projects across all platforms

Projects

TCPDump - Network Packet Analyzer

Wireshark - Network Traffic Analyzer

AiEngine - Packet Inspection Engine

netsniff-ng - The packet sniffing beast

TechStack

Tagcloud

License

Suggested keywords:

Projects

TCPDump - Network Packet Analyzer

Wireshark - Network Traffic Analyzer

AiEngine - Packet Inspection Engine

netsniff-ng - The packet sniffing beast

TechStack

Tagcloud

License