Distributed tcpdump for cloud native environments, capturing and streaming network packets from multiple hosts to a central receiver.
PacketStreamer is a distributed network packet capture tool that collects raw traffic from multiple remote hosts and streams it to a central receiver. It solves the problem of monitoring network activity across cloud native environments like Kubernetes, VMs, and AWS Fargate, enabling centralized forensic analysis and security observability.
Security engineers, DevOps teams, and cloud platform operators who need to capture and analyze network traffic across distributed workloads for threat detection, forensics, or compliance.
Developers choose PacketStreamer for its lightweight, portable design that works across diverse cloud environments without performance overhead, and its ability to integrate with existing security tools like Wireshark and Suricata for streamlined analysis.
:star: :star: Distributed tcpdump for cloud native environments :star: :star:
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Sensors are lightweight and impose little performance impact, focusing solely on capture and streaming without additional processing, as stated in the design goals.
Works across virtual machines, Kubernetes, AWS Fargate, Linux, and Windows, ensuring adaptability in diverse cloud environments, per the philosophy section.
Output is compatible with tools like Zeek, Wireshark, and Suricata, allowing seamless integration into existing security and analysis pipelines, as highlighted in key features.
Supports TLS encryption and compression for traffic streams, providing secure data transmission between sensors and receiver, mentioned in the security options.
Requires installing the golang toolchain and libpcap-dev before building, which adds overhead compared to pre-compiled binaries or drop-in solutions, as noted in the quick start.
Designed solely for capture and streaming, it lacks built-in packet analysis or filtering capabilities, necessitating external tools for detailed inspection, which limits standalone use.
Sensors must maintain network connectivity to the receiver, making it unsuitable for isolated or air-gapped systems without proper configuration, a critical limitation for some environments.