pkt2flow
A cross-platform utility that classifies network packets into flows using the essential 4-tuple (src_ip, dst_ip, src_port, dst_port).
What is pkt2flow?
pkt2flow is a command-line utility that classifies network packets into individual flows based on the 4-tuple (source/destination IP and port). It takes a pcap file as input and outputs separate pcap files for each flow, enabling researchers and analysts to examine traffic patterns without payload reassembly or extra processing.
Network researchers, security analysts, and developers working with packet capture data who need to separate traffic into flows for deep packet inspection, traffic classification, or academic research.
Unlike tools like tcpflow that reassemble payloads, pkt2flow focuses purely on flow separation, making it faster and simpler for scenarios where only packet classification is needed. Its cross-platform support and minimal dependencies make it easy to integrate into analysis pipelines.
Overview
A simple, cross-platform utility to classify packets into flows using only the essential 4-tuple.
Use Cases
Best For
- Splitting large pcap files into individual flow traces
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
