the TCPdump network dissector
the LIBpcap interface to various kernel packet capture mechanism
tcpslice concatenates multiple pcap files together, or extracts time slices from one or more pcap files.
Linux eBPF rootkit framework leveraging eBPF programs to achieve kernel-level persistence and stealth without traditional loadable kernel modules.
💉Test the syntax and effectivness of your BPF easily using tshark.
A real-time, multi-threaded Python NIDS optimized with Berkeley Packet Filter (BPF) for 1k-3k packets/sec. Delivers <200ms alerts via 8 threat algorithms alongside a full-stack WebSocket + Plotly dashboard with SQLite storage.
To associate your repository with the berkeley-packet-filter topic, visit your repo's landing page and select "manage topics."