ShowMeThePackets

Network analyzer

Tools and resources for network monitoring and analysis used in the SANS SEC503 course

Useful network monitoring, analysis, and active response tools used or mentioned in the SANS SEC503 course (https://www.sans.org/course/intrusion-detection-in-depth)

GitHub

213 stars
42 watching
43 forks
Language: Jupyter Notebook
last commit: about 2 months ago

Related projects:

Repository Description Stars
vadims06/isiswatcher A tool for monitoring and analyzing IS-IS topology changes in network devices. 4
xplico/xplico Analyzes network traffic data from captured packets to extract and decode specific protocols and information. 182
antirez/hping A network tool capable of sending custom TCP/IP packets and displaying target replies. 1,449
akestoridis/zigator Analyzes and manipulates data from Zigbee and Thread networks to identify security vulnerabilities and simulate attacks. 29
1an0rmus/tekdefense-automater Automates OSINT analysis of IP addresses and hashes by querying multiple data sources 535
tomchop/malcom Analyzes network traffic to detect malware communication and behavior 1,155
hatriot/zarp A network attack tool designed to manage and analyze local networks 1,448
ivre/masscanned A network responder that provides generic answers to various protocols and applications 109
shmohammadi86/netdecode A tool to decode and analyze network traffic patterns 0
schochastics/levelnet An R package to analyze two-mode networks and extract their binary backbone. 9
netflix-skunkworks/diffy An incident response tool that helps digital forensics teams analyze and prioritize suspicious hosts in cloud environments 635
sunwxg/golibwireshark A Go-based tool for decoding and analyzing network capture files using the libwireshark library. 29
vadims06/topolograph An online tool for visualizing and analyzing OSPF/ISIS network topologies 177
matthewjdenny/ccas Provides tools for modeling and analyzing communication network data using statistical models. 5
netenglabs/suzieq A framework and application for improving network observability by analyzing data from devices across the network. 798