AOL Moloch

Moloch is an open source, packet capturing, indexing, and database system. Moloch augments current security infrastructure to store and index network traffic in standard PCAP format. A web interface is provided for PCAP browsing, searching, and exporting. Moloch exposes APIs which allow for PCAP data and JSON formatted session data to be downloaded and consumed directly. Moloch stores and exports all packets in standard PCAP format and allows you to also use your favorite PCAP ingesting tools, such as Wireshark, during your analysis workflow. AOL Moloch integrates with FireEye today via their AOL Moloch plug-in with FireEye Security Orchestration.