stratosphereips/StratosphereLinuxIPS

NIPS — Machine-Learning-Based Network Intrusion Prevention System | Kitsune/LUCID integrated | Online unsupervised anomaly detection | Kernel-level real-time traffic interception | FastAPI + CLI management

Advanced Python-based Intrusion Detection System (IDS) featuring a real-time dashboard, GeoIP analysis, email alerts, and firewall integration for network threat monitoring and response.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Snort++

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.

Malicious traffic detection system

Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis.

Real-time eBPF-powered network security monitor with AI-driven threat detection. Surfaces port scans, DDoS attacks, botnet activity, and anomalies at 100Gbps+ speeds with sub-microsecond latency (~150 million packets/sec).