_______ _____.___. ________    _____      _____   
\      \\__  |   |/  _____/   /     \    /  _  \  
/   |   \/   |   /   \  ___  /  \ /  \  /  /_\  \ 
/    |    \____   \    \_\  \/    Y    \/    |    \
\____|__  / ______|\______  /\____|__  /\____|__  /
       \/\/              \/         \/         \/ 

pcap or it didn't happen

$ ny index-pcap ~/any.pcap


■ nygma is #pcap #packet #indexing and #querying <3 ■

despite the fact that there is a ui the main part of the project is designed as a standalone library with minimal dependencies. the ui was designed for demonstration purposes.


code is public domain: wtfnwpl. enjoy.

if there is interest in a wireshark plugin contact me.

if there is interest in high speed capture and live/stream indexing contact me.

if there is interest in a yara flow tagging engine contact me.

if there is interest in a xor search flow tagging engine contact me.

the indexing speed can reach 20gb/s peek per core on current desktop hardware as of 2020/2021. this includes the hyperscan based regexp indexing, of course depending on the patterns.

i have diagnosed adhd and am happy over any support.