pmacct is a small set of multi-purpose passive network monitoring tools [NetFlow IPFIX sFlow libpcap BGP BMP RPKI IGP Streaming Telemetry].

Insert trace-points into the running configuration to observe the path of packets through the iptables chains.

c-binding free API for golang to communicate with the log subsystem of netfilter

Simple scapy-based tool to hijack and reset existing TCP connections

Tool to collect nflog and pipe it to a pcap stream/file over network (0mq) for real-time (or close to) analysis

nflog is a pure Go client library for capturing and parsing NFLog messages

📨 sql based firewall event logging via nflog netlink and ulogd2 userspace daemon. improved sql scheme for space efficient storage. multi-host log aggregation using dedicated sql-users.

Driver for scapy to allow capturing packets via Linux NFLOG interface

Conntrack entry removal daemon

Python wrapper for libnetfilter_log.

Network event emitter for Linux.