Skip to content
Netcap
SIEM & Threat Detection
A framework for secure and scalable network traffic analysis - https://netcap.io
Go
·
Latest v0.9.0 · 1mo ago
Security brief →
Features
-
Decodes 83 packet-layer protocols (Ethernet, IPv4/6, TCP, UDP, DNS, TLS, etc.) and 40+ stream protocols (TLS, SSH, HTTP/2, QUIC, SMB, FTP, …)
-
Built‑in React web UI with interactive visualizations (Sankey diagrams, treemaps, geo maps, host graphs)
-
Security analysis features: JA4 fingerprinting, YARA malware rules, Magika AI file type classification, credential harvesting and extraction
-
Outputs audit records in Protocol Buffers (default), CSV, JSON or directly to Elasticsearch
-
Enrichment options: DNS reverse lookup, GeoIP, MAC vendor resolution, optional Deep Packet Inspection via nDPI/libprotoident
v0.9.0
Breaking risk
·
Notable features
- Generic protobuf wire format stream decoder
- Support for additional protocols
- YARA and Magika support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
Go
·
TypeScript
·
Shell
Install & Platforms
Platforms
linux
macos
windows
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open
