From 77eda13d259f9262b1aee5a2a852e9ae8b3d4552 Mon Sep 17 00:00:00 2001 From: Jacob Date: Wed, 24 Jun 2026 10:46:29 -0400 Subject: [PATCH] Add ftagent-lite to Traffic Analysis/Inspection section --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index 5c8c8fe..bf71bbc 100644 --- a/README.md +++ b/README.md @@ -117,6 +117,8 @@ Traffic Analysis/Inspection * [ECap](https://web.archive.org/web/20170715080351/https://bitbucket.org/nathanj/ecap/wiki/Home): (External Capture) is a distributed network sniffer with a web front- end. Ecap was written many years ago in 2005, but a post on the tcpdump-workers mailing list requested a similar application... so here it is. It would be fun to update it and work on it again if there's any interest. +* [ftagent-lite](https://github.com/Flowtriq/ftagent-lite): A lightweight, single-file DDoS traffic monitor. Captures packets via raw sockets and reports PPS, bandwidth, protocol breakdown, source IP cardinality, and attack severity in real time. Outputs structured JSON for piping into custom alerting or analysis pipelines. + * [EtherApe](https://etherape.sourceforge.io/): is a graphical network monitor for Unix modeled after etherman. Featuring link layer, ip and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP and SLIP devices. It can filter traffic to be shown, and can read traffic from a file as well as live from the network. * [Ettercap](https://github.com/Ettercap/ettercap): is a suite of tools for traffic capture and analysis using ARP Poisoning (A form of MitM attack, only use on networks you control)