Open Source Software Related to Deep Packet Inspection and Processing

No comments

This is a list of open source software that may be of interest to the dPacket.org community. The list is maintained by the Open Source Software General Discussion Group at dPacket.org. Our intention is to continually update this list, and to modify its contents and layout to best serve the community. Your feedback is appreciated. This is obviously a work in progress (and just starting).

Flow-based Tools (Collection, Analysis, Probes)

Argus - http://www.qosient.com/argus/

AMP, beFlow, Trickler - http://www.nsa.gov/techtrans/techt00043.cfm

fprobe - http://fprobe.sourceforge.net

NAF - http://tools.netsa.cert.org/naf/

Nprobe, Ntop - http://www.ntop.org

RAVE - http://tools.netsa.cert.org/rave/

SiLK - http://tools.netsa.cert.org/silk/

YAF - http://tools.netsa.cert.org/yaf/

Intrusion Detection/Prevention

Bro IDS  - http://www.bro-ids.org/Overview.html

Prelude Hybrid IDS Project - http://www.prelude-ids.org/

Shoki - http://shoki.sourceforge.net/

Snort IDS/IPS - http://www.snort.org

Network Protocol Capture and Anaylsis

Libpcap and Tcpdump - http://www.tcpdump.org/

Pcapdiff - http://www.eff.org/testyourisp/pcapdiff/

Wireshark (previously Ethereal) - http://www.wireshark.org

Testing Tools

Tcpreplay - http://tcpreplay.synfin.net/

Tomahawk - http://tomahawk.sourceforge.net/

Wednesday, January 9th, 2008 at 5:56 pm and is filed under Internet, System. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.