Maltrail
Malicious traffic detection system utilizing public blacklists and heuristic traffic behavior analysis.
Why consider Maltrail?
Maltrail is an open-source network traffic detection system written in Python. It cross-references network packets against authoritative public threat lists to detect Command & Control (C&C) beacons, malware downloads, and malicious DNS requests.
Learn Maltrail by building
Practical setup notes, real use cases, and copy-ready examples in one focused guide.
In this guide2 sections
Overview of Maltrail
Maltrail flags suspicious outbound network connections and infected device communications in real-time.
Quickstart
git clone https://github.com/stamparm/maltrail.gitcd maltrailsudo python sensor.py &python server.pyAccess http://localhost:8338 to view live network traffic alerts and identified malware domains.
Maltrail is licensed under the GNU General Public License v2.0.
Related tools
More options with a similar category or technology profile.
Dapr CLI
Command-line tool for managing Dapr distributed application runtime environments and sidecars.
bpytop
Python port of bashtop with game-like UI, responsive mouse support, and hardware sensors.
bashtop
Linux resource monitor showing usage and stats for processor, memory, disks, network, and processes.
SchemaHero
Kubernetes-native declarative database schema management and table migration operator.