ndpi 开源项目推荐（34 个）

ntop /nDPI

Open Source Deep Packet Inspection Software Toolkit

pmacct /pmacct

pmacct 是一组小型多用途被动网络监控工具 [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry]。

nfstream /nfstream

NFStream: a Flexible Network Data Analysis Framework.

vel21ripn /nDPI

Open Source Deep Packet Inspection Software Toolkit

utoni /nDPId

Tiny nDPI based deep packet inspection daemons / toolkit.

NotYuSheng /TracePcap

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio).

akshitvjain /deeplearning-network-traffic

Network Traffic Identification with Convolutional Neural Networks

hepictel /nDPIex

NTOP nDPI Library example usage and FFI bindings for Lua, NodeJS ➰

c-arthurs /labelstrip

GUI wrapped around anonymise label for SVS and NDPI whole slide images

VolanticSystems /luci-app-appflow

Per-application traffic dashboard for OpenWrt. Live DPI visibility by app and device in LuCI, powered by netifyd. No cloud service, no licence key.

hepictel /node-ndpi

nDPI Bindings for Node JS

fepegar /ndPytools

Little Python tool to manage Hamamatsu NDPI files

packetlens /vpp-ndpi

Open-source DPI plugin for FD.io VPP — classify 300+ applications (YouTube, SIP, TLS, QUIC) at line rate using nDPI

jsrojas /NtopngDataEditor

A java application that loads 3 csv files obtained from ntopng, CICFlowmeter, and nDPI. It compares the flows statistics obtained from pcap files with CICFlowmeter and ntopng and once a match is found that flow is labeled with the Layer 7 protocol obtained with the nDPI library within ntopng. The application delivers a csv file with all the flow…

fs714 /go-ndpi

A nDPI wrapper by golang based on CGO

jasonish /suricatax-ndpi-plugin

Experimental Suricata 8.0 nDPI 5 Plugin

hunterMG /ntopng-docker

Run ntopng with Docker.

hepictel /ndpi-beat

NodeJS nDPI (Deep Packet Inspection) "Beat" for Elasticsearch 🎱

maxlluky /VPN-Traffic-Obfuscation-Lab

This repository contains a reproducible Docker-based testbed to evaluate the detectability of VPN traffic (baseline WireGuard) and VPN obfuscation techniques (e.g., obfs4, udp2raw) using Suricata IDS, Zeek, nDPI & tcpdump.

stefanDeveloper /heiDPI

nDPId Docker Image for packet inspection