Network Security¶

Capture, decode, and hunt across the wire.

system

Protocol-aware network monitor that turns traffic into structured logs.

backports

IDS/IPS engine (installed from bookworm-backports — not in Debian's main archive) with the Emerging Threats Open ruleset pre-downloaded.

system

Packet capture and inspection, GUI and CLI.

app

Desktop app for searching Zeek logs and pcaps side by side.

venv

Detects known-malicious traffic against public blacklists/heuristics.