bro / zeek

Network security monitor (Bro renamed to Zeek).

$ sudo zeek -i eth0
$ zeek -r capture.pcap