Packet Sniffer

MultiMail is an offline mail packet reader for many systems, using a curses-based interface. It supports the Blue Wave, QWK, OMEN, SOUP, and OPX formats.. Platforms: *nix

HttpCapture is a core wrapper around the packet-capture library pcap and a framework for building plugins to filter, analyse, or display interesting network packets. The core of the application is minimal, and a collection of plugin libraries are used to actually process the packets. The... Platforms: *nix

fwlogwatch is a packet filter / firewall / IDS log analyzer written by Boris Wesslowski originally for RUS-CERT. fwlogwatch supports a lot of log formats and has many analysis options. It also features incident report and realtime response capabilities, an interactive web interface and... Platforms: *nix

Radical is a simple Radius packet decoder to assist in the debugging of Radius sessions. It accepts the output of the Solaris snoop(1M) command and it is written in Python. language.. Platforms: *nix

Net::DHCP::Packet is a Perl module with object methods to create a DHCP packet. SYNOPSIS use Net::DHCP::Packet; my $p = new Net::DHCP::Packet->new( Chaddr => 000BCDEF, Xid => 0x9F0FD, Ciaddr => 0.0.0.0, Siaddr => 0.0.0.0, Hops => 0); Represents a DHCP packet as specified in RFC 1533,... Platforms: *nix

PacGen is an Ethernet IP TCP/UDP packet generating tool for Linux. Experimental ARP generation is included. Experimental ARP generation is included. This tool enables custom packets with configurable Ethernet, IP, TCP, and UDP layers as well as custom payloads. As an added feature there are... Platforms: *nix

NSH is intended to handle configuration for interfaces, bridging, routing, packet filtering, NAT, and ISAKMP. It presents the user with a vaguely cisco-like interface. It also gives the user access to system information and diagnostics. NSH replaces the userland commands which handle these... Platforms: *nix

Scanhill project is a Microsoft Messenger Protocol Sniffer. Currently it can only intercept Instant Text Messaging. Optionally, intercepted text messages can be stored onto an RDMBS (Only mySQL is supported for now). Given that mySQL is used, stored instant messages can be read through a... Platforms: *nix

jNetPcap project is a Java wrapper around the Libpcap network packet capture library. The low-level API is exposed in Java, which allows kernel buffer tuning, flags, and other features. All captured packet buffers are wrapped, not copied, in efficient java.nio.ByteBuffer and delivered to Java... Platforms: *nix

jNetStream is a protocol analyzer and a sniffer. A set of applications and complete Java library are provided with a comprehensive API. Hundreds of protocols have been defined, and the list can be expanded with a simple NPL language. It is appropriate for custom protocol development, grad... Platforms: *nix

Packet Construction Set is a set of Python modules and objects that make building network protocol code easier for the protocol developer. The core of the system is the pcs module itself which provides the necessary functionality to create classes that implement packets. Installation... Platforms: *nix

TiVoBridge is a packet repeater for both the TiVo discovery beacon and Multicast DNS (used in ZeroConf, Bonjour, Rendevous, etc.) protocols. The project is intended as a way for TiVo boxes and other devices or programs that use either of those (normally single-subnet) protocols to see each other... Platforms: *nix

Impost is a network security auditing tool designed to analyze the forensics behind compromised and/or vulnerable daemons. Theres two different kinds of operating modes used by Impost; It can either act as a honey pot and take orders from a Perl script controlling how it responds and communicates... Platforms: *nix

Hogwash is an inline packet scrubber that uses Snorts detection engine to drop malicious packets before they reach the target. The original version of what is now hogwash was written in 1996 while I was at Idaho State University. I had a web server that when patched, broke the software it... Platforms: *nix

Pdump project (Packet dump) is a network packet sniffer. Installation: The simplest way to compile this package is: 1. `cd to the directory containing the packages source code and type `./configure to configure the package for your system. If youre using `csh on an old version of System V,... Platforms: *nix

pcapsipdump is libpcap-based SIP sniffer with per-call sorting capabilities. It writes SIP/RTP sessions to disk in a same format, as "tcpdump -w", but one file per SIP session (even if there is thousands of concurrent SIP sessions). Platforms: *nix

nf-HiPAC is a full featured packet filter for Linux which demonstrates the power and flexibility of HiPAC. HiPAC is a novel framework for packet classification which uses an advanced algorithm to reduce the number of memory lookups per packet. nf-hipac package is ideal for environments involving... Platforms: *nix

passlogd is a purpose-built sniffer for capturing syslog messages in transit. This allows for backup logging to be performed on a machine with no open ports. Useful if your log server is compromised or you dont want to sift through a terabyte of sniffer logs. Passlogd is currently under... Platforms: *nix

FifoEmbed is a thread-safe basic queue, packet queue, and FIFO allocator. When programming device drivers, network stacks, and similar systems, you often need a queue and storage management. FifoEmbed provides three C abstract data types, all implemented on top of circular arrays: - A basic... Platforms: *nix

interfaceTrafcalc calculates the size of the TCP-payload on a system via packet capturing and connection tracking at the user level instead of the IP level. The program uses a pcap (a library for Packet CAPturing) callback function which is called for every incoming (tcp) packet. This function... Platforms: *nix