Tools
arkime
arkime/arkime
Arkime is a large-scale open-source full-packet capture, indexing, and analysis system that stores traffic as PCAP and offers a web interface for searching and exporting sessions.
Topics
Related projects
zeek8.2kA powerful network security monitoring framework with deep protocol analyzers and a scripting language, used for traffic analysis, threat detection, and incident response.
suricata6.8kSuricata is an open-source network IDS, IPS, and security monitoring engine developed by the OISF, designed for high-performance analysis of live network traffic.
sniffnet42.2kA cross-platform desktop app for comfortably monitoring network traffic, with real-time charts, connection inspection, geolocation, protocol identification, notifications and PCAP import/export.
radare225.4kA libre reverse engineering framework and command-line toolset for analyzing, disassembling, debugging, and patching binaries across many architectures and formats.
keeweb13kKeeWeb is a free cross-platform password manager that opens and creates KeePass kdbx vaults. It runs as a desktop app or in the browser, and can store credentials locally or in cloud services such as Dropbox, Google Drive and OneDrive.
maltrail8.7kA malicious network traffic detection system that matches observed traffic against threat-intelligence trails and reports events through a web interface.