•        232

Pcap.Net is a .NET wrapper for WinPcap written in C++/CLI and C#. It Features almost all WinPcap features and includes a packet interpretation framework.




Related Projects


Network decoder and file exporter. Reads pcap files or sniffs traffic and stores data in mysql. Supports ethernet,ARP,STP,IP,TCP,UDP and ICMP and on layer7 bittorrent,DNS,FTP,HTTP,IRC,Mail,MSN,palltalk,POP3,SIP,smtp and ssh

SoftEther VPN - Cross-platform Multi-protocol VPN Program

SoftEther VPN is a ?Cross-platform Multi-protocol VPN Program. It supports SSL-VPN protocol to penetrate any kinds of firewalls. Ultra-optimized SSL-VPN Protocol of SoftEther VPN has very fast throughput, low latency and firewall resistance. Virtualization of Ethernet devices is the key of the SoftEther VPN architecture. It virtualizes Ethernet devices in order to realize a flexible virtual private network for both remote-access VPN and site-to-site VPN.


ArpON (Arp handler inspectiON) is a portable handler daemon that make ARP secure in order to avoid the Man In The Middle through ARP Spoofing/Poisoning. Detects/blocks the DNS, WEB Spoofing, Session Hijacking, SSL/TLS Hijacking amp; co attacks.

Python Packet Capture Library

Pycap provides the ability to capture packets from, and inject packets onto, network interfaces. It dissects commonly found structures in network packets such as Ethernet, IP, ARP, TCP, UDP, and ICMP headers.


Liquorice is a multithreaded SASOS for use in embedded systems (8 bit and up). Includes a small but working IP/ARP/ICMP/UDP/TCP stack with SLIP, PPP and Ethernet support.

echolot - network station monitor

echolot implements a packet sniffer that grabs ARP packets on any ethernet devices. This empowers your boxlt;brgt; * to detect intruders (new mac in lan)lt;brgt; * to find your boxes on foreign lans (known mac in lan)


Mr. ARP (More Reliable ARP) is a new protocol upon original ARP which has an authentication mechanism and prevents from Man In the Middle, ARP Poisoning, MAC Spoofing Attacks.

dproxy - caching DNS proxy

dproxy is a smart caching nameserver for use on gateway machines with non-permenant connections. It includes support for PPP, Ethernet, ISDN and DHCP connections.


choparp is a proxy ARP daemon. It listens for ARP requests on a network interface, and sends ARP replies with a specified MAC addresses when the requested IP addresses matches a user-provided list.

arp scannet

simple arp MAC address scanner in c# with variable time gap(1sec to 30 sec) of arp requests over local network (wired and wireless) with fine delay of 50 millisecond. outputs in various formats currently works on ms windows with dot net framework install

ARP AntiSpoofer

A utility for detecting and resisting BIDIRECTIONAL ARP spoofing. It can anti-spoof for not only the local host, but also other hosts in the same subnet. It is as well a handy helper for gateways which don't work well with ARP.

external-dns - Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services

ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.Inspired by Kubernetes DNS, Kubernetes' cluster-internal DNS server, ExternalDNS makes Kubernetes resources discoverable via public DNS servers. Like KubeDNS, it retrieves a list of resources (Services, Ingresses, etc.) from the Kubernetes API to determine a desired list of DNS records. Unlike KubeDNS, however, it's not a DNS server itself, but merely configures other DNS providers accordingly—e.g. AWS Route 53 or Google CloudDNS.

dingo - A DNS client in Go that supports Google DNS over HTTPS

A DNS client (stub resolver) implemented in Go for the Google DNS-over-HTTPS. It effectively encrypts all your DNS traffic. It also supports OpenResolve by OpenDNS. The ultimate goal for the project is to provide a secure, caching DNS client that communicates with recursive DNS resolvers over encrypted channels only. For now, it resolves DNS queries over HTTP/2 in independent threads. The plans for future include better caching and support for QUIC.

Dns Changer

DnsChanger makes if simple for users to change their DNS setting to use the various open DNS such as Google DNS, Open DNS and Fool DNS. It's developed in C#.

dnscrypt-proxy - A flexible DNS proxy, with support for encrypted DNS protocols.

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. It includes all the major features from dnscrypt-proxy 1.9.5, with improved reliability, flexibility, usability and performance.

dnsjava - DNS implementation in Java

dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. A cache is used to reduce the number of DNS queries sent. A simple tool for doing DNS lookups, a 'dig' clone and a dynamic update client are included, as well as a simple authoritative-only server.

ARP Daddy

A set of simple shell scripts to query (via SNMP) any router in an enterprise network for a list of active ARP cache entries. These entries are then merged into a host table with timestamp of last seen entry.

metallb - A network load-balancer implementation for Kubernetes using BGP and ARP

MetalLB is a load-balancer implementation for bare metal Kubernetes clusters, using standard routing protocols.Check out MetalLB's website for more information.


Java editor for petri nets, based on the ARP analyzer. Exports nets to GIF, JPEG, PNG, PPM, ARP and PNML (XML based) file format. Uses the excellent JHotDraw 5.2 framework.

Ethernet bridge tables

Ethernet bridge tables - Linux Ethernet filter for the Linux bridge. The 2.4-ebtables-brnf package contains the ebtables+bridge-nf patch. Be sure to check out the ebtables hp. This site also contains the arptables userspace tool.