Topics / #packet-capture

Packet-capture projects on GitHub

Tools for capturing, sniffing, and analyzing network packets.

As of , the most-starred Packet-capture projects on GitHub are sniffnet (41.6K stars), ecapture (15.5K stars) and brook (15.2K stars). GitHub.Locker tracks 6 Packet-capture repositories with 106.5K stars combined. The fastest-growing on October 16 was sniffnet, with +14 stars in a day.

6Projects
106.5KStars in total
+28Stars in a day
Browse in the catalog →github.com/topics/packet-capture ↗

Hot right now

Most stars gained in a day · Oct 16

+14

sniffnet

GyulyVGC/sniffnet · ★ 41.6K

Sniffnet is a cross-platform desktop app for monitoring your network traffic in real time, with a graphical interface instead of raw terminal output.

+7

scapy

secdev/scapy · ★ 12.6K

Scapy is a Python-based interactive packet manipulation program and library that lets you forge, decode, send, capture, and analyze network packets.

+4

fq

wader/fq · ★ 10.6K

fq is a command-line tool, language and collection of decoders for working with binary formats - often described as jq for binary data. You can dump a file's structure, run jq-style queries against it and explore results in an interactive REPL.

+2

ecapture

gojue/ecapture · ★ 15.5K

An open-source command-line security tool that uses eBPF to capture SSL/TLS traffic in plaintext — no CA certificate installation or MITM proxy needed. It can also audit shell commands and database queries on the host.

The all-time top

6 projects · by stars

  1. #1 · GyulyVGC/sniffnet

    sniffnet

    Sniffnet is a cross-platform desktop app for monitoring your network traffic in real time, with a graphical interface instead of raw terminal output.

    41.6K
  2. #2 · gojue/ecapture

    ecapture

    An open-source command-line security tool that uses eBPF to capture SSL/TLS traffic in plaintext — no CA certificate installation or MITM proxy needed. It can also audit shell commands and database queries on the host.

    15.5K
  3. #3 · txthinking/brook

    brook

    Brook is a cross-platform programmable network tool that works as both a server and a client, giving you SOCKS5 proxying, TLS encryption, traffic decryption/MITM inspection, and packet capture in one toolkit.

    15.2K
  1. 4

    scapy

    12.6Ksecdev/scapy · Python

    Scapy is a Python-based interactive packet manipulation program and library that lets you forge, decode, send, capture, and analyze network packets.

  2. 5

    netshoot

    11Knicolaka/netshoot · Shell

    netshoot is a Docker and Kubernetes network troubleshooting container, a 'swiss-army' image packed with networking, DNS, performance, and security tools for debugging container and host network issues.

  3. 6

    fq

    10.6Kwader/fq · Go

    fq is a command-line tool, language and collection of decoders for working with binary formats - often described as jq for binary data. You can dump a file's structure, run jq-style queries against it and explore results in an interactive REPL.

Often tagged together