Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

High-level, multiplatform C++ network packet sniffing and crafting library.

A Software Probe for network packet capturing and forwarding in Cloud/Kubernetes and Virtualized environment.

Tenzir is the data pipeline engine for security teams.

pktvisor is a dynamic network observability agent that smartly analyzes network traffic and generates opentelemetry metrics

A library for creating and sending .pcap files for Wireshark and other programms.

Replay UDP packets from a pcap file

Hyenae NG is an advanced cross-platform network packet generator and the successor of Hyenae. It features full network layer spoofing, pattern based address randomization and flood detection breaking mechanisms.

A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.

Packet Analyzer powered by Wireshark compiled for WebAssembly

High-throughput / low-latency C++ application framework

Testbed for testing NetFlow/IPFIX network monitoring probes. Includes tools for PCAP generation and replay of 1/10/100G network traffic.

unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework

A minimalist, low-latency, HFT CME MDP3.0 C++ market data feed handler and pcap file reader (MDP 3.0)

A FUSE module to mount captured network data

Squey is a visualization software designed to interactively explore and understand large amounts of tabular data (this is the read-only mirror of https://gitlab.com/squey/squey)

DuckDB extension for readin PCAP files

🔱 Yet another ARP posioning tool