Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.

jq for binary formats - tool, language and decoders for working with binary and text formats

A terminal UI for tshark, inspired by Wireshark

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

An open source real-time network topology and protocols analyzer

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK and PF_RING.

the TCPdump network dissector

the LIBpcap interface to various kernel packet capture mechanism

High-level, multiplatform C++ network packet sniffing and crafting library.

⭐ ⭐ Distributed tcpdump for cloud native environments ⭐ ⭐

Portable (that doesn't include proprietary/commercial operating systems) solution for conversion of cap/pcap/pcapng (gz compressed) WiFi dump files to hashcat formats (recommended by hashcat) and to John the Ripper formats. hcx: h = hash, c = convert and calculate candidates, x = different hashtypes

Small tool to capture packets from wlan devices.

❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

No-root network monitor, firewall and PCAP dumper for Android

Packages and utilities for network booting

HOMER - 100% Open-Source SIP, VoIP, RTC Packet Capture & Monitoring

Malcom - Malware Communications Analyzer