cisco/joy

Health v2 · maintenance only

Flags: no_releases archived no_license

Adoption not part of the score

1368 stars · 334 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Joy is a libpcap-based C package that captures network traffic and extracts flow and intraflow features (packet timing, byte distributions, TLS/DNS/HTTP details) into JSON. It includes analysis tools for network research, forensics, and security monitoring.

Use cases

• capture and analyze network flow data as JSON
• fingerprint TLS traffic for security research
• monitor a small network for unwanted or unauthorized behavior
• extract features from pcap files for forensics
• study packet length and timing sequences within flows
• analyze DNS names and HTTP headers in traffic captures

When to choose

• you need flow-oriented network feature extraction in JSON for research or forensics
• you want TLS fingerprinting and intraflow data from live traffic or pcap files
• you are doing security monitoring on a small network you administer

When to avoid

• you need actively developed fingerprinting tools - the maintainers recommend Cisco Mercury instead
• you need large-scale production network monitoring rather than research-scale analysis
• you want a GUI-based traffic analyzer rather than a command-line tool

Facets

cli-tool · maturity maintenance

networking security analytics monitoring security networking developer-tools cli network-forensics flow-analysis tls-fingerprinting pcap json-output traffic-analysis linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cisco/joy")