TracePcap

Self-hosted PCAP analysis platform with LLM-powered incident triage, signature-based threat detection, and AI-generated incident narratives. Features network change monitoring across captures, deep packet inspection via nDPI, and automated Wireshark filter generation. Runs fully offline with local LLMs (Ollama, LM Studio). Maintained by NotYuSheng on GitHub, where it has earned 30 stars from the community.

It's actively developed around ai, blue-team, cyber-defense, and is a solid reference for anyone building with these tools.