Files

T

History

Marco Cadetg a65dbb055f feat(ui): align the Details Application card across protocols (#557 )

* feat(ui): align the Details Application card across protocols
* feat(ui): show DNS, LLMNR, and NetBIOS transaction IDs in Details

2026-08-16 16:58:43 +02:00

assets

Update OUI vendor database (#517 )

2026-08-01 09:23:47 +02:00

src

feat(ui): align the Details Application card across protocols (#557 )

2026-08-16 16:58:43 +02:00

Cargo.toml

Mark connections to the default gateway (#529 )

2026-08-07 16:57:09 +02:00

README.md

refactor: remove dead public API from the library crates (#551 )

2026-08-14 15:31:27 +02:00

README.md

rustnet-core

The reusable network-analysis core of RustNet.

rustnet-core is the platform-independent, capture-independent layer that turns bytes into meaningful network information. It has no dependency on libpcap, raw sockets, or OS process tables — it operates on byte slices and parsed structures, so it can be embedded in any tool that already has packets to analyze.

Features

Packet parsing for Ethernet, Linux SLL/SLL2, PKTAP, raw IP, and TUN/TAP link layers, plus IPv4/IPv6, TCP, UDP, ICMP, and IGMP.
Deep packet inspection for HTTP, HTTPS/TLS (SNI extraction), DNS, SSH, QUIC, NTP, mDNS, LLMNR, DHCP, SNMP, SSDP, NetBIOS, and more.
Connection merging — fold parsed packets into long-lived connection state with protocol-aware lifecycle tracking and TCP analytics (retransmissions, out-of-order, fast-retransmit).
GeoIP lookups against MaxMind GeoLite2 databases.
Reverse DNS with background async resolution and caching.
OUI vendor and service-name resolution from baked-in datasets (no runtime files required — the data is embedded at compile time).

Layout

Everything lives under the [network] module.

Status

The public API is currently 0.x and may change between minor versions while the workspace split stabilizes.

License

Apache-2.0