A high-performance Deep Packet Inspection (DPI) engine rewritten in Python.
This project is a progressive rewrite of the original WireSpectra C++ engine, focusing on protocol parsing, flow tracking, and real-time application classification.
- Raw PCAP reading and writing (no external libraries for parsing).
- Layer 2-4 Protocol Parsing (Ethernet, IPv4, TCP, UDP).
- SNI & Hostname extraction for encrypted traffic classification.
- Rule-based filtering and blocking.
- Multi-process architecture for high throughput.
Check DEVELOPMENT_LOG.md for the detailed 30-day build history.