Live threat monitoring active

THREATS DON'T
SLEEP.
NEITHER SHOULD
YOUR NETWORK.

Real-time packet analysis, DNS threat hunting, and device forensics — all from your terminal. Enterprise-grade intelligence, zero GUI bloat.

Start Monitoring Now View on GitHub
Scroll to explore
01 — What is PacketPulse

See Every
Byte. Miss
Nothing.

PacketPulse is enterprise-grade network security intelligence delivered through an intuitive terminal interface. Built for security engineers who live in the CLI.

Capture packets in real-time, hunt DNS threats, scan URLs for malicious content, profile USB devices, and correlate forensic data — all without leaving your command line.

Powered by VirusTotal, Google Safe Browsing, nmap, and proprietary DGA detection — all unified in a single, scriptable tool.

5
Modules
3
Threat APIs
<50ms
Capture Latency
packetpulse — monitoring
$ sudo packetpulse --interface eth0
[INFO] Initializing packet capture...
[LIVE] Capturing on eth0 — 847 packets/s
[ALERT] DGA domain detected: x7k4.ru → entropy 4.92
[SAFE] 192.168.1.12 → google.com:443 SSL/TLS OK
[BLOCK] VirusTotal: malware.top — 18/72 engines flagged
[USB] New device: SanDisk Ultra — profiling...
[DNS] Beaconing pattern: 192.168.1.88 — 34 req/min
▶
02 — The Arsenal

Five Modules.
One Terminal.

MODULE 01
Packet Sniffer
Deep HTTP, DNS, and GeoIP packet inspection in real-time. Capture, filter, and analyze network traffic at the byte level.
● Live capture active
MODULE 02
URL Scanner
VirusTotal + Google Safe Browsing + SSL certificate validation. Know if a URL is malicious before your users click it.
72 engine scan
MODULE 03
DNS Monitor
DGA domain detection with entropy scoring, beaconing pattern flags, and high-risk TLD identification in real-time.
● 3 DGA domains flagged
MODULE 04
Device Forensics
USB device profiling, LAN host fingerprinting, and nmap integration. Know exactly what's on your network.
LAN + USB profiling
MODULE 05
Full Pipeline
Run all four modules in parallel with unified, correlated output. One command, complete network visibility.
All modules active
03 — Real Threats

What Standard
Tools Miss.

Without PacketPulse
Standard tools ignore suspicious traffic patterns entirely
Manual device audits take hours and miss rogue hardware
False positives waste analyst time with noisy alerts
DNS exfiltration goes undetected until it's too late
No correlation between packet data and threat intelligence
With PacketPulse
Detects beaconing, DGA domains, and data exfil in real-time
Full LAN and USB device forensics profiled in seconds
Intelligent flagging with entropy scores and TLD risk ratings
DNS monitoring catches tunneling and anomalous query rates
VirusTotal + GeoIP + SSL correlation in a single pipeline
04 — Quick Start

Up in 60
Seconds.

01
Install via pip
Requires Python 3.8+ and root/admin privileges for packet capture.
02
Set your API key
Get a free VirusTotal API key at virustotal.com for URL and DNS threat scanning.
03
Launch PacketPulse
The interactive menu launches immediately. Select a module or run the full pipeline.
05 — Why PacketPulse

Built for the
Command Line.

Fast
Real-time analysis with sub-50ms capture latency. No buffering. No delays. Threats flagged the moment they appear.
Deep
Packet-level visibility correlated with VirusTotal, GeoIP, SSL, and proprietary DGA entropy detection.
Open
CLI-first, fully scriptable, open-source. Integrate into your existing security pipelines with zero friction.
Get Started

Start Hunting
Threats
Today.

Open-source. CLI-native. Enterprise-grade.

Install Now — pip install packetpulse View on GitHub