Fatt

a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic.

Platforms: Linux · Last verified September 6, 2026

a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Bundled with T-Pot. See T-Pot's official README (linked above, under "Honeypots and Tools") and this project's own homepage for details.

All-in-one multi-honeypot platform with 20+ honeypots and Elastic Stack visualization