caronte

Caronte is a network flow analysis tool designed for Capture The Flag (CTF) events, specifically for attack/defence scenarios. It reassembles TCP packets from pcap files, allowing users to define custom patterns for analysis through regex or protocol-specific rules, with results visualizable via a web application and accessible through a REST API. Key features include quick deployment via Docker, an intuitive GUI for configuration and rule management, and advanced analytics capabilities such as timeline visualizations and detailed connection filtering.