Top 7 C++ Pcap Projects

zeek

1 5,919 9.9 C++

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.

Project mention: Suricata VS zeek - a user suggested alternative | libhunt.com/r/suricata | 2024-01-02

FastNetMon

8 3,333 8.9 C++

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support

Project mention: Versatile open source toolkit to detect volumetric DDoS attacks | news.ycombinator.com | 2023-10-10

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
PcapPlusPlus

32 2,574 9.1 C++

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

Project mention: PcapPlusPlus v23.09 is out! - C++ library for capturing and analyzing network packets | /r/cpp | 2023-10-01

It's been a while since our last release (about 10 months) so quite a lot has changed. I'll try to summarize the most important things. You can see the full list of changes in the release notes: https://github.com/seladb/PcapPlusPlus/releases/tag/v23.09

tenzir

15 611 10.0 C++

Open source security data pipelines.

Project mention: Vector: A high-performance observability data pipeline | news.ycombinator.com | 2024-03-17

We're building something similar at Tenzir, but more for operational security workloads. https://docs.tenzir.com
Differences to Vector:
- An agent has optional indexed storage, so you can store your data there and pick it up later. The storage is based on Apache Feather, Parquet's little brother.
- Pipelines operators both work with data frames (Arrow record batches) or chunks of bytes.
- Structured pipelines are multi-schema, i.e., a single pipeline can process streams of record batches with different schemas.

ArduinoPcap

2 400 0.0 C++

A library for creating and sending .pcap files for Wireshark and other programms.

Project mention: Can i use the wifi board without the flipper zero? | /r/flipperzero | 2023-07-02

Um wait you can't capture Pcaps and crack them with an ESP chip what the heck have i been doing for the last week?? cause it works! https://github.com/spacehuhn/ArduinoPcap

hyenae-ng

1 114 0.0 C++

Hyenae NG is an advanced cross-platform network packet generator and the successor of Hyenae. It features full network layer spoofing, pattern based address randomization and flood detection breaking mechanisms.
wiregasm

1 45 5.3 C++

Packet Analyzer powered by Wireshark compiled for WebAssembly
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).