pf-ring

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

High-speed packet processing framework

单线程用户态TCP/IP协议栈，epoll实现，包含服务器案例，并发测试案例

Yara powered NIDS with high speed packet capture powered by PF_RING

brostash: Linux distribution based on Debian and focusing on network security events collection

Part of the Sentry by Protectus. Project to interpret bytes off the wire, storing connection metadata and per-second volume information in Mongo. Released as open source in memory of Pete Garvin.