tshark + ELK analytics virtual machine

PacketSifter is a tool/script that is designed to aid analysts in sifting through a packet capture (pcap) to find noteworthy traffic. Packetsifter accepts a pcap as an argument and outputs several files.

CLI tool to extract conversation audio from pcap files

The callflow sequence diagram generator is a collection of awk and shell scripts that will take a packet capture file that can be read by wireshark and produce a time sequence diagram. This is useful to view & debug SIP callflows or other network traffic.

Useful bash scripts

A small and simple network infrastructure with automated attacks on a VM server documented by tshark

tshark network forensics ubuntu windows

SOC mini-lab: detección de puertos, captura y análisis de tráfico”

WiFi pentesting framework with OSINT capabilities, DNS spoofing, captive portal, and handshake capture. Web-based control panel for security demonstrations.

Repo for Three Pieces of Pi, Studio 2, Noroff University College

Calculate frame inter arrival times

Bash script for automated PCAP analysis using tshark (Wireshark CLI) for network traffic inspection and cybersecurity tasks.

This repo contains code and resources for analyzing network traffic captured with Wireshark on a Linux os.

Yunus' Traffic Statter 2.0 is a cool tool for checking out what's happening on your network. It uses tshark to grab and look at network packets as they fly by, giving you a real-time peek into your network's activity. You can pick which network interface to watch, and it'll spit out detailed reports and graphs to help you make sense!

Some baseline scripts for Wi-Fi Analysis, network mapping, and enrichment.

Advanced Zsh autocomplete plugin for TShark that provides protocol-aware, hierarchical completion for display filters and extracted fields, enabling Wireshark-like field discovery directly from the command line.

Automation toolkit for PCAP capture, Suricata IDS evaluation, and baseline-vs-attack reporting in a VM lab.