Netzob

What Netzob is

Netzob is a free, open-source tool for reverse engineering communication protocols, generating traffic, and fuzzing. It can infer message formats and protocol state machines through passive or active processes. Vocabulary inference learns formats from supplied traces, while grammar inference supports semi-automatic learning of a protocol state machine. Given those models, its simulator can act as a client, server, or both to generate traffic. The fuzzing module uses protocol vocabulary and grammar to create test cases through mutation and generation. Listed inputs include live network traffic, PCAP captures, IPC, text and binary files, and API flows through supported file formats. Output options include XML, human-readable formats, and Peach fuzzer exports, and users can write their own exporter. The project describes compatibility work with Wireshark, Scapy, Peach, and Sulley; its stable release changelog lists automatic Wireshark dissector and Peach fuzzer generation. Netzob runs locally on Linux and Windows, with Python 3 listed as its supported language. It is intended to help security evaluators create fuzzers for proprietary or undocumented protocols. The download page lists version 0.4.1 as the latest stable release, with source and Debian packages dated February 2, 2013.