libpcap

Masscanrobertdavidgraham/masscan

An Internet-scale TCP port scanner that can scan the entire Internet in under 5 minutes using asynchronous SYN packets.

Wiresharkwireshark/wireshark

A network protocol analyzer that captures and interactively browses traffic running on a computer network.

Packet, where are you?cilium/pwru

eBPF-based Linux kernel networking debugger for tracing and filtering network packets with fine-grained introspection.

nethogsraboof/nethogs

A Linux 'net top' tool that groups network bandwidth usage by process instead of protocol or subnet.

BruteSharkodedshimon/BruteShark

A Network Forensic Analysis Tool (NFAT) for deep inspection of PCAP files and live traffic, extracting credentials, building network maps, and reconstructing sessions.

EttercapEttercap/ettercap

A comprehensive suite for man-in-the-middle attacks, featuring live connection sniffing, content filtering, and protocol dissection.

rustnetdomcyrus/rustnet

A cross-platform terminal UI network monitor providing real-time connection tracking, deep packet inspection, and process attribution.

Deepfence PacketStreamerdeepfence/PacketStreamer

Distributed tcpdump for cloud native environments, capturing and streaming network packets from multiple hosts to a central receiver.

tcpflowsimsong/tcpflow

A TCP/IP packet demultiplexer that captures and reconstructs TCP connections into separate files for protocol analysis and forensics.