All Projects → nbareil → Net2pcap

nbareil / Net2pcap

Net2PCAP is a simple network-to-pcap capture file for Linux. Its goal is to be as simple as possible to be used in hostile environments

Programming Languages

c
50402 projects - #5 most used programming language

Projects that are alternatives of or similar to Net2pcap

Libtins
High-level, multiplatform C++ network packet sniffing and crafting library.
Stars: ✭ 1,609 (+4369.44%)
Mutual labels:  network, pcap
Pcapxray
❄️ PcapXray - A Network Forensics Tool - To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction
Stars: ✭ 1,096 (+2944.44%)
Mutual labels:  network, pcap
Daggy
Daggy - Data Aggregation Utility. Open source, free, cross-platform, server-less, useful utility for remote or local data aggregation and streaming
Stars: ✭ 91 (+152.78%)
Mutual labels:  network, pcap
Joincap
Merge multiple pcap files together, gracefully.
Stars: ✭ 159 (+341.67%)
Mutual labels:  network, pcap
Pypacker
📦 The fastest and simplest packet manipulation lib for Python
Stars: ✭ 216 (+500%)
Mutual labels:  network, pcap
Sniffglue
Secure multithreaded packet sniffer
Stars: ✭ 651 (+1708.33%)
Mutual labels:  network, pcap
Packet Agent
A toolset for network packet capture in Cloud/Kubernetes and Virtualized environment.
Stars: ✭ 419 (+1063.89%)
Mutual labels:  network, pcap
Scapy
Scapy: the Python-based interactive packet manipulation program & library. Supports Python 2 & Python 3.
Stars: ✭ 6,932 (+19155.56%)
Mutual labels:  network, pcap
Pcapfs
A FUSE module to mount captured network data
Stars: ✭ 17 (-52.78%)
Mutual labels:  pcap
Networkmnt
Monitor network float of process
Stars: ✭ 31 (-13.89%)
Mutual labels:  network
Subdue
The Subdue graph miner discovers highly-compressing patterns in an input graph.
Stars: ✭ 20 (-44.44%)
Mutual labels:  network
Androidutilcode
AndroidUtilCode 🔥 is a powerful & easy to use library for Android. This library encapsulates the functions that commonly used in Android development which have complete demo and unit test. By using it's encapsulated APIs, you can greatly improve the development efficiency. The program mainly consists of two modules which is utilcode, which is commonly used in development, and subutil which is rarely used in development, but the utils can be beneficial to simplify the main module. 🔥
Stars: ✭ 30,239 (+83897.22%)
Mutual labels:  network
Unrealnetworkprofiler
A modern WPF based Network Profiler for Unreal Engine.
Stars: ✭ 29 (-19.44%)
Mutual labels:  network
Phpnetmap
Web application for ethernet network mapping. PHP Software for network device monitoring with SNMP v(1/2c/3) protocol.
Stars: ✭ 20 (-44.44%)
Mutual labels:  network
Cytoscape.js
Graph theory (network) library for visualisation and analysis
Stars: ✭ 8,107 (+22419.44%)
Mutual labels:  network
Hsdn
Analysis of the human symptoms–disease network
Stars: ✭ 15 (-58.33%)
Mutual labels:  network
Tinytcpserver
A small tcp server working under Mono or .NET (4.0) and provides hooks for handling data exchange with clients (works under mono and .net). Behaviour/protocol/reaction could be specified via custom C# script.
Stars: ✭ 14 (-61.11%)
Mutual labels:  network
Erewhon Game
Video game about programming your spaceships to destroy other programmed spaceships o/
Stars: ✭ 35 (-2.78%)
Mutual labels:  network
Eoip
EoIP/EoIPv6 for *nix.
Stars: ✭ 34 (-5.56%)
Mutual labels:  network
Xinblog
前端基础。Vue框架。数据结构与算法。计算机网络。夯实基础。
Stars: ✭ 29 (-19.44%)
Mutual labels:  network

Net2PCAP is a simple network to pcap capture file for Linux. Its goal is to be as simple as possible (hence auditable) so that good confidence can be reached, for it to be used in hostile environments.

It does not require any library except a bit of libc. It does not do anything except dumping network traffic from an interface to a pcap file. It is less than 600 lines of C. Please audit it !

Comparison with tcpdump

  • Yes, tcpdump -w capfile can do almost the same. But the goal of tcpdump is network debugging (thus, lot of options, packet disassembly, etc.). The goal of net2pcap is to capture traffic into a file in hostile environments (honeypots, internet, etc.) for future analysis.
  • net2pcap can run in daemon mode
  • net2pcap can reopen its capture file (SIGHUP) (used for capture file rotation)
  • net2pcap does not do anything else than reading from network and dumping to file
  • net2pcap does not use libpcap
  • net2pcap drops its privileges
  • net2pcap sandboxes itself (if libseccomp is available)
  • net2pcap runs only on Linux
  • net2pcap is auditable (less than 600 lines)

Original code from Philippe Biondi, bugs added by Nicolas Bareil :)

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].