Watersrc-stack/NetOtter
1
0
Fork 0
Code Issues Projects Releases 7 Packages Wiki Activity
7 releases 7 tags
  • release-1.2.1 6d792a596e

    release-1.2.1 Stable

    Watersrc-stack released this 2026-10-14 03:51:59 +00:00 | 0 commits to master since this release

    Fixed some interactive commands / keybinds

    Downloads
  • release-1.2.0 aa240e387e

    release-1.2.0 Stable

    Watersrc-stack released this 2026-10-14 03:12:21 +00:00 | 2 commits to master since this release

    NetOtter r1.02.00

    New: traffic anomaly detection

    Every packet, captured live or loaded with -I, now goes through a set of detectors. New findings are printed as they happen, colour-coded by severity.

    • Connections: port scans, host sweeps, request floods and bursts, SSH/RDP/database brute force, hosts outside your trusted networks (-T <file>), hosts reached without a DNS lookup
    • Errors: services refusing or not answering, SYN floods, failed DNS lookups (random domain names), failing resolvers, unreachable reports, HTTP error ratios
    • Timing: beaconing (regular check-ins, jitter-tolerant), traffic spikes
    • Content: protocols on the wrong port (SSH on 443, HTTP on 53...), DNS tunnels
    • ARP and sniffers (passive): an address changing MAC (critical for the gateway), IP conflicts, one MAC answering for many addresses, reverse-DNS bursts

    New commands: w (every anomaly, most severe first), s (statistics: top talkers, services, flows, packets-per-second chart), and the anomaly <kind|all> filter. -c prints the statistics and the report after the list.

    Other changes

    • Every packet has a capture time: l shows the seconds since the first packet, i the full date
    • l now shows what it recognizes in packets: [DNS NXDOMAIN], [HTTP 404], [port unreachable ...], [echo request]
    • i shows what a packet's data looks like (TLS, SSH, HTTP, DNS, QUIC...)
    • Faster capture on Linux: a memory-mapped kernel ring (8 MiB) instead of the socket buffer; frames dropped by the kernel or Npcap are now reported instead of lost silently
    • New regression lab, tools/lab/: 22 scenarios in a virtual network that needs no root
    • Wiki: new Anomaly detection, Anomaly lab and Traffic anomalies pages; examples re-recorded

    Compatibility

    • Save format is now v16: files from earlier versions (v13 to v15) can't be loaded
    Downloads
  • release-1.0.1 63e24e0774

    release-1.0.1 Stable

    Watersrc-stack released this 2026-10-13 21:09:00 +00:00 | 26 commits to master since this release

    Changelog
    (fix) Fixed some linker issues on windows
    (feat) Added a few more filtering options for packets

    Downloads
  • release-1.0.0 0167de4147

    release-1.0.0 Stable

    Watersrc-stack released this 2026-10-11 14:35:13 +00:00 | 30 commits to master since this release

    NetOtter is finally here !
    Compiles on Linux and Windows, make sure to read carefully the installation instructions.

    Downloads
  • beta-0.3.0 a7f8b1d27e

    beta-0.3.0 Pre-release

    Watersrc-stack released this 2026-10-09 11:10:23 +00:00 | 61 commits to master since this release

    Enormous changes to packet analysis and filters system.
    There is some keybinds changes compared to the version beta-0.2.0

    Starting with the filter options;

    • 'ipv4' filters, src, dest, both
    • 'ipv6' filters, src, dest, both
    • 'port' filters, src, dest, both
    • 'me' filters that contains all IPs of the current machine
    • 'etype' filter, filter by EtherType number/name
    • 'proto' filter, filter by Proto number/name

    Packet analysis:

    • Added IANA protocols recognition
    • ARP decoding
    • IGMP / MLD decoding
    • IPv6 extension headers walked
    • TCP flags shown in main display
    • Port/app association
    • IPs are resolved using reverse DNS for hostname discovering
    • TLS SNI for hostname discovering
    • QUIC is partially decrypted for hostname discovering
    • "analysis" view mode

    Save format version is now 9 (was 2).
    Documentation describing the list of keybinds is yet to come, this is a subject of change until release 1.0.0

    Downloads
  • beta-0.2.0 2dbdba1806

    beta-0.2.0 Pre-release

    Watersrc-stack released this 2026-10-08 22:21:10 +00:00 | 97 commits to master since this release

    • Added a saving system. You can now use -f/-F to import/save packets into a .nto file. In interactive mode, 's' command has been added to save in a file while the program is running"
    Downloads
  • beta-0.1.0 65e392268b

    beta-0.1.0 Pre-release

    Watersrc-stack released this 2026-10-07 15:37:34 +00:00 | 105 commits to master since this release

    Linux networking, interactive interface to display informations on packets.
    Beta release, not optimized, not clean.

    Downloads