Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

High-level, multiplatform C++ network packet sniffing and crafting library.

A Software Probe for network packet capturing and forwarding in Cloud/Kubernetes and Virtualized environment.

Open source security data pipelines.

pktvisor is a dynamic network observability agent that smartly analyzes network traffic and generates opentelemetry metrics

A library for creating and sending .pcap files for Wireshark and other programms.

Replay UDP packets from a pcap file

Hyenae NG is an advanced cross-platform network packet generator and the successor of Hyenae. It features full network layer spoofing, pattern based address randomization and flood detection breaking mechanisms.

A command-line utility program that performs some simple operations on PCAP files (Wireshark/tcpdump traces) very quickly. Allows you to manipulate very large PCAP files that cannot be easily handled with other software like Wireshark (or tshark). Supports filtering encapsulated GTPu frames. Easily extendible.

High-throughput / low-latency C++ application framework

Packet Analyzer powered by Wireshark compiled for WebAssembly

unix socket interface for C++ raw IP/IP6/UDP/TCP, Layer2 etc. framework

A FUSE module to mount captured network data

Testbed for testing NetFlow/IPFIX network monitoring probes. Includes tools for PCAP generation and replay of 1/10/100G network traffic.

🔱 Yet another ARP posioning tool

Qt GUI for npcap

Capture LiDAR ethernet packet as pcap file

PCAP parser library