Network security monitor that analyzes live traffic or pcap files
Network security monitor
zeek
zeek-config
$ zeek -i eth0
$ zeek -r capture.pcap
$ zeek -r traffic.pcap local