Page cover image

๐ŸฅœNetwork Analysis Tool

  • Wireshark: The most widely used network protocol analyzer that captures and interacts with network traffic in real-time. It provides detailed packet analysis and supports various protocols.

  • tcpdump: A command-line packet analyzer that captures and displays network packets. It's powerful for real-time traffic analysis and can be used in conjunction with Wireshark for deeper inspection.

  • Suricata: An open-source network threat detection engine that performs real-time intrusion detection (IDS), inline intrusion prevention (IPS), and network security monitoring (NSM).

  • Zeek (formerly Bro): A powerful network analysis framework that focuses on network monitoring and forensics. It generates detailed logs of network activity and can be customized for specific analysis needs.

  • Snort: An open-source network intrusion detection system (NIDS) that performs real-time traffic analysis and packet logging to detect and prevent intrusions.

  • NetFlow Analyzer: A traffic analytics tool that uses flow data (NetFlow, sFlow, etc.) to provide insights into network traffic patterns and bandwidth usage.

  • Nmap: A network scanning tool that discovers hosts and services on a network, providing information about network topology, open ports, and running services.

  • Netwitness Investigator: A network forensics analysis tool that captures and analyzes full network packet data, helping to investigate security incidents and understand network activity.

  • Fiddler: A web debugging proxy tool that captures HTTP and HTTPS traffic between your computer and the internet, useful for analyzing web application interactions and network communications.

  • NetworkMiner: A network forensics analysis tool that captures and parses network traffic to extract files, credentials, and other artifacts for forensic investigation.

Last updated