ntopng - Web-based Traffic and Security Network Traffic Monitoring

•    Lua

---

ntopng is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. While you can read more about ntopng on the ntop web site (http://www.ntop.org), we suggest you to start reading the doc/README.md file for learning how to compile and use ntopng.

ntopng realtime network sflow ipfix traffic-monitoring packet-analyser packet-processing netflow snmp ebpf docker kubernetes

DPDK - Data Plan Development Kit

•    C

---

DPDK is a set of libraries and drivers for fast packet processing. It was designed to run on any processors. The first supported CPU was Intel x86 and it is now extended to IBM Power 8, EZchip TILE-Gx and ARM. These libraries can be used to receive and send packets within the minimum number of CPU cycles (usually less than 80 cycles), develop fast packet capture algorithms (tcpdump-like) and run third-party fast path stacks.

packet-processing packet-capture networking-library tcp-dump

PcapPlusPlus - PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and crafting framework

•    C++

---

PcapPlusPlus is a multiplatform C++ network sniffing and packet parsing and crafting framework. PcapPlusPlus is meant to be lightweight, efficient and easy to use.

c-plus-plus pf-ring dpdk packet-parsing winpcap pcap-files pcap packet-processing cpp libpcap multiplatform mac-osx packet-analyser networking network-forensics network-tools tcp-reassembly packet-crafting

nff-go - NFF-Go -Network Function Framework for GO (former YANFF)

•    Go

---

NFF-Go becomes part of DPDK project umbrella under Linux Foundation! Mirror repo can be found here: http://dpdk.org/browse/apps/nff-go/. We will accept patches through DPDK mail-list and standard DPDK contribution process too. NFF-Go is a set of libraries for creating and deploying cloud-native Network Functions (NFs). It simplifies the creation of network functions without sacrificing performance.

dpdk networking vnf containers intel network-functions packet-processing scalable ipsec dpdk-driver cloud-native cloud microservices scalable-networking nfv-framework

libmoon - libmoon is a library for fast and flexible packet processing with DPDK and LuaJIT.

•    Lua

---

LuaJIT + DPDK = fast and flexible packet processing at speeds above 100 Gbit/s. Read and try out one of the examples to get started.

dpdk packet-processing luajit

joincap - Merge multiple pcap files together, gracefully.

•    Go

---

Merge multiple pcap files together, gracefully. I believe skipping corrupt packets is better than failing the entire merge job. When using tcpslice or mergecap sometimes pcapfix is needed to fix bad input pcap files.

pcap merge tcpdump-capture packet-processing network pcap-files command-line pcap-processor commandline concat tcpdump packet join sysadmin sysadmin-tool forensics network-analysis