{"adoption": {"forks": 1135, "observed_at": "2026-08-28T04:09:19.837924+00:00", "stars": 5492}, "canonical_url": "https://ross.abutalabs.com/products/dshell", "card": {"archived": false, "artifact_type": "framework", "description": "Dshell is a network forensic analysis framework.", "domain": ["security", "networking", "developer-tools"], "enriched": true, "function": ["security", "networking", "parser", "plugin-system", "developer-tools"], "health_score": 26, "homepage": null, "language": "Python", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["USArmyResearchLab/Dshell"], "name": "USArmyResearchLab/Dshell", "platform": ["python", "cli"], "pushed_at": "2024-05-07T12:53:36+00:00", "repo": "USArmyResearchLab/Dshell", "stars": 5492, "tags": ["network-forensics", "pcap-analysis", "packet-capture", "stream-reassembly", "digital-forensics", "incident-response", "forensics", "linux"], "topics": [], "urls": [], "use_cases": ["analyze pcap files for network forensics", "dissect network packet captures with custom plugins", "reassemble TCP streams from packet captures", "investigate suspicious network traffic during incident response", "extract TLS metadata like JA3 fingerprints from pcaps", "chain multiple analysis plugins over a capture", "geolocate IP addresses seen in network traffic"], "what_it_is": "Dshell is an extensible network forensic analysis framework written in Python for dissecting network packet captures (pcap/pcapng). It supports plugin development, stream reassembly, IPv4/IPv6, chainable plugins, and parallel processing.", "when_to_avoid": ["you need a real-time network intrusion detection system rather than offline pcap analysis", "you require a GUI-based packet analyzer like Wireshark", "you need live traffic capture and analysis rather than processing saved capture files", "you work primarily on Windows or macOS since it is developed for Linux"], "when_to_choose": ["you need to perform deep packet analysis on pcap files", "you want an extensible framework to write custom network forensic plugins", "you need stream reassembly with IPv4 and IPv6 support", "you are doing incident response or network security investigations on Linux"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/dshell", "repo": "USArmyResearchLab/Dshell", "role": "main", "score": 23}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:09:19.837924+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:56:20.206980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a08744c9a26445c87518b716b44d6716c64995a9241fdad51aaaba38b1e4b64d", "fetched_at": "2026-08-28T04:09:19.837924+00:00", "kind": "readme", "missing": false, "url": "https://github.com/USArmyResearchLab/Dshell"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4277, "days_push": 848, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 23, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}