cxtracker - (Connection Tracker) is a passive network connection tracker for profiling, history, auditing and network discovery. It can be used as an replacement for sancp in the sguil setup. It handles vlan (2 layers) and IPv6 out of the box.


* Fast!
* Compiles with MMAP libpcap! (Makes it faster!)
* Small

We would like you very much to try it out, tell us what you think, and come with ideas to make cxtracker better.

Blog posts


CxTracker is available as a tar- or zip-ball, but you can also clone it with git.
We recommend the cxtracker 0.9.5 release which should be available here.