Security

Jomon – network forensics and passive sniffer

Jomon is a network forensics and passive sniffer tool. It monitors all incoming/outgoing network traffic, without the use of libpcap, and the processes that are generating this traffic.

It supports packet filtering by writing BPF assembly directly or writing in a higher level tcpdump syntax (tcpdump syntax has very limited support for now).

It uses a minimal set of libraries, libncurses for the UI and libGeoIP for geolocation (optional). The BPF scanner/lexical analyzer is made with the help of re2c.

This is free and open source software.

Website: github.com/jo-lund/jomon
Support:
Developer: John Olav Lund
License: MIT License

Jomon in action
Click image for full size

Jomon is written in C. Learn C with our recommended free books and free tutorials.


Related Software

Digital Forensics Tools
GRR Rapid ResponseRemote live forensics for incident response
Radare2Portable reversing framework
The Sleuth KitCollection of tools for forensic analysis
Autopsy Forensic BrowserGraphical interface to SleuthKit
iaitoOfficial graphical interface for radare2
VolatilityAdvanced memory forensics framework
guymagerForensic imaging tool based on Qt
dcflddEnhanced version of dd for forensics and security
rddForensic copy program
JomonNetwork forensics and passive sniffer
Mozilla InvestiGatorReal-time digital forensics and investigation platform
VelociraptorEndpoint visibility and collection tool
TimesketchCollaborative forensic timeline analysis
PlasoPython-based digital forensics framework
MemProcFSView physical memory as files in a virtual file system
ChainsawFast forensic triage and threat hunting tool for Windows artefacts

Read our verdict in the software roundup.


Best Free and Open Source Software Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.

This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk.

You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more.

Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form.
Subscribe
Notify of
guest
0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments