What is NetBee?
NetBee is a new library intended for several types of packet processing, such as packet sniffing and filtering, packet Dec Oding, and traffic classification (not ready yet).
NetBee provides a set of modules that can is used by applications the need to process network packets. Instead of creating some custom code in your application for packet processing, you can use the functions exported by NetB Ee.
This library is made to several components. It includes several objects for packet decoding, packet sniffing and filtering, traffic classification (not ready yet), an D some miscellaneous utilities. Additionally, it includes some components (such as the NETPDL Protocol definition language, the NETVM packet processing VI Rtual machine) which is the used to do it job, but their knowledge was not the required from programmers using NetBee. For a list of features that is present in NetBee, please look at the introduction page.
Why NetBee?
NetBee is a powerful the library for generic packet processing. NetBee is created by the same of the group that created WinPcap, the De-facto standard for sniffing packets in Windows. However, WINPCAP architecture (which is derived from its UNIX ancestor, Libpcap) is rather old and it does not fit for now Adays needs. WinPcap is a perfect choice in case you need a powerful the library for sniffing packets with cross platform compatibility (Wi Npcap and the unix-based Libpcap are almost fully compatible). However, the architecture behind WinPcap (and Libpcap) have not been engineered for supporting extensions and new modules F or other kinds of processing in addition to packet sniffing.
This is the reason of Netbee:we feel, the effort needed to expand and update WinPcap cannot pay in the long term. We believe the best choice are to create a new library from scratch, with a completely new architecture (object-based, For instance), open to extensions and the ready to fit to new needs. NetBee, in fact. This guarantees a high degree of freedom but, of course, it'll often leads to un-tested code due to the relative poor Ma Turity of the library.
If you start with using NetBee and you used WinPcap in the past, you'll see that the interface (which are object oriented) is Much cleaner than its ancestor. You can find it's pretty easy-to-read packets from the network as well as from a file or from some other source. This was due to the object-oriented architecture of NetBee. You'll be surprised how easy are to use NetBee in your programs.
Please note that NetBee are highly experimental at the current stage; No guarantees is given that the API would not be on the future. Therefore, the current release must is intended as a proof of concept in order to share some ideas with the Resea RCH community.
http://www.nbee.org/doku.php
Network packet processing tool Netbee