PacketQ
A command-line tool that runs SQL queries directly on PCAP files and includes a built-in web server for remote inspection.
What is PacketQ?
PacketQ is a command-line tool that allows users to run SQL queries directly on PCAP (packet capture) files, enabling efficient network traffic analysis without the need for intermediate databases. It supports multiple output formats like JSON, CSV, and XML, and includes a built-in web server for remote PCAP inspection. The tool is designed for fast decoding and querying, making it ideal for troubleshooting and analyzing network protocols such as DNS and ICMP.
Network administrators, security analysts, and developers who need to analyze packet capture files for debugging, monitoring, or research purposes. It is particularly useful for those working with DNS traffic or requiring SQL-based querying capabilities on raw network data.
PacketQ stands out by combining SQL querying with direct PCAP file analysis, eliminating the need for database imports. Its lightweight design, minimal dependencies, and built-in web server offer a self-contained solution for both local and remote packet inspection, with extensible protocol support and performance optimizations for large files.
Overview
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
