A multi-threading tool to sniff TCP flow statistics and extract HTTP headers from live traffic or PCAP files.
http-sniffer is a command-line network analysis tool that sniffs TCP traffic to extract HTTP headers and compute flow statistics. It processes live network interfaces or PCAP files, pairing HTTP requests with responses and exporting detailed metrics in JSON or CSV format. It solves the need for a lightweight, performant tool to inspect HTTP traffic within TCP streams for debugging or security purposes.
Network engineers, security analysts, and developers who need to inspect HTTP traffic, debug network issues, or analyze PCAP files for HTTP-based interactions.
Developers choose http-sniffer for its multi-threaded performance, support for both live and offline analysis, and clean JSON/CSV output that integrates easily with other tools, all in a simple, MIT-licensed package.
A multi-threading tool to sniff TCP flow statistics and embedded HTTP headers from PCAP file. Each TCP flow carrying HTTP is exported to text file in json format.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Leverages parallel processing for fast traffic analysis, as emphasized in the features for handling high-volume captures efficiently.
Supports both real-time network interface monitoring and PCAP file analysis, making it versatile for debugging and forensic investigations.
Outputs detailed HTTP sessions and TCP flow statistics in JSON or CSV formats, facilitating easy integration with scripts and other tools.
Parses TCP streams to extract and pair HTTP requests with responses, providing comprehensive session data for deep analysis.
Only handles HTTP over TCP, ignoring encrypted HTTPS and other protocols, which restricts its use in mixed or secure environments.
Lacks a GUI, requiring terminal expertise and file-based output, which may hinder users preferring visual tools or real-time dashboards.
Requires external libraries like libpcap and json-c, with potential installation issues on Linux needing alternative json-c versions, as noted in the README.