Network Traffic Classification ML Frameworks

ML models and frameworks for classifying network traffic patterns, protocols, and anomalies in real-time or batch processing. Includes encrypted traffic analysis, DPI alternatives, and flow-based identification. Does NOT include general network monitoring tools, packet capture utilities without ML classification, or broader cybersecurity frameworks not focused on traffic categorization.

There are 54 network traffic classification frameworks tracked. 7 score above 50 (established tier). The highest-rated is GACWR/OpenUBA at 69/100 with 470 stars and 275 monthly downloads.

Get all 54 projects as JSON

curl "https://pt-edge.onrender.com/api/v1/datasets/quality?domain=ml-frameworks&subcategory=network-traffic-classification&limit=20"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.

#	Framework	Score	Tier	Stars	Language
1	GACWR/OpenUBA A robust, and flexible open source User & Entity Behavior Analytics (UEBA)...	69	Established	470	Python
2	nfstream/nfstream NFStream: a Flexible Network Data Analysis Framework.	68	Established	1,197	Python
3	CESNET/cesnet-datazoo CESNET DataZoo: A toolset for large network traffic datasets	58	Established	44	Python
4	CESNET/cesnet-models CESNET Models: Neural networks for network traffic classification	55	Established	22	Python
5	echowei/DeepTraffic Deep Learning models for network traffic classification	54	Established	763	Python
6	faucetsdn/poseidon Poseidon is a python-based application that leverages software defined...	54	Established	430	Python
7	nextcloud/suspicious_login Detect and warn about suspicious IPs logging into Nextcloud	51	Established	102	PHP
8	deepfence/FlowMeter ⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐	43	Emerging	1,188	Go
9	stefanDeveloper/heiFIP heiFIP: A tool to convert network traffic into images for ML use cases	42	Emerging	29	C++
10	p4lang/p4app-switchML Switch ML Application	41	Emerging	201	C++
11	munhouiani/Deep-Packet Pytorch implementation of deep packet: a novel approach for encrypted...	41	Emerging	250	Jupyter Notebook
12	brent-stone/CAN_Reverse_Engineering Automated Payload Reverse Engineering Pipeline for the Controller Area...	40	Emerging	440	Python
13	stdlib-js/datasets-suthaharan-multi-hop-sensor-network Labeled wireless sensor network data set collected from a multi-hop wireless...	37	Emerging	2	JavaScript
14	nds-group/ETC_NOMS_2024 Encrypted Traffic Classification at Line Rate in Programmable Switches with...	34	Emerging	19	Python
15	kahramankostas/Anomaly-Detection-in-Networks-Using-Machine-Learning A thesis submitted for the degree of Master of Science in Computer Networks...	34	Emerging	237	Jupyter Notebook
16	stdlib-js/datasets-suthaharan-single-hop-sensor-network Labeled wireless sensor network data set collected from a simple single-hop...	33	Emerging	2	JavaScript
17	IndexFziQ/ML-ATIC Abnormal Traffic Identification Classifier based on Machine Learning. My...	33	Emerging	30	Java
18	rickyzhang82/V2Ray-Deep-Packet-Inspection Notebook demo V2Ray traffic classification by deep packet inspection	32	Emerging	164	Jupyter Notebook
19	jwd164/space-cyber-anomaly-detection-dataset The SCAD dataset provides high-fidelity satellite telemetry under both...	31	Emerging	13	Jupyter Notebook
20	WithHades/network_traffic_classification_paper 收集了部分将机器学习应用于网络流量分类的论文	28	Experimental	174	—
21	jogecodes/transformerAD Code for the paper "Anomaly-Based Intrusion Detection in IIoT Networks Using...	28	Experimental	36	Jupyter Notebook
22	ait-aecid/rootkit-detection-ebpf-time-trace Detection of rootkit file hiding activities through analysis of shifts in...	27	Experimental	29	Python
23	DoHaiSon/BNaT BNaT: Blockchain Network Attack Traffic Dataset	26	Experimental	6	—
24	AreejFatimaz/Network-Traffic-Analysis-using-Machine-Learning This project focuses on implementing anomaly detection in computer networks...	24	Experimental	4	Jupyter Notebook
25	aliebayani/IoT-Devices-Intrusion-Detection Integrating CNN-LSTM Networks with Statistical Filtering Techniques for...	24	Experimental	14	Python
26	rubenpjove/tabularT-OS-fingerprinting This repository employs two different architectures of Tabular Transformer...	24	Experimental	3	Jupyter Notebook
27	Md-Emon-Hasan/ML-Project-Intrusion-Detection-Systems-Anomaly-Detection-with-ML-DL 🔒 Leverages Machine Learning and Deep Learning models to identify malicious...	23	Experimental	2	Jupyter Notebook
28	CESNET/cesnet-tcexamples Jupyter notebooks with traffic classification examples using CESNET DataZoo...	23	Experimental	10	Jupyter Notebook
29	ashwinn-v/Traffic-classifier-SDN A system that could classify DNS, Telnet, Ping, Voice, Game, and Video...	23	Experimental	44	Python
30	roshnrf/PIRS 9-layer ML pipeline that predicts insider threats 3–14 days before they...	22	Experimental	—	Python
31	DuseTrive/Anomaly-Based-NID-using-svm This project uses SVM and AI to create an efficient tool for detecting...	22	Experimental	1	Jupyter Notebook
32	rogue-agent1/pcapsum Network connection summary: list, filter, group by process/port.	22	Experimental	—	Python
33	eugen-goebel/network-threat-analyzer Multi-agent network threat detection combining rule-based signatures with ML...	22	Experimental	—	Python
34	isadfrn/network-threat-classifier This repository contains Python scripts for analyzing network traffic data...	22	Experimental	—	Python
35	Rachico/deep-sdn Intelligent SDN traffic classification using deep learning : Generating and...	21	Experimental	10	Jupyter Notebook
36	talshapira/ODE-Flow Based on the paper "Fast and lean encrypted Internet traffic...	21	Experimental	10	Jupyter Notebook
37	shaeferd/Network-Traffic-Prediction Ensemble Model for Network Intrusion Detection and Prevention	19	Experimental	2	Python
38	Anurag-Dutta/KAN-Vis Visual Technique for Network Traffic Classification	19	Experimental	—	Jupyter Notebook
39	sirius-22/ml-intrusion-detection-ics Bachelor's Thesis: Applications of Machine Learning Techniques for Intrusion...	19	Experimental	—	TeX
40	geetika016/NetworkTrafficAnalyzer Flask Application to Analyze and Visualize Network Traffic Data using...	18	Experimental	2	JavaScript
41	Martynka123-code/Online-machine-learning-based-packet-classification-project Real-time network traffic classifier using dual-path Machine Learning...	15	Experimental	1	Python
42	Wahid7852/untor-tor Tor traffic analysis platform for extracting, classifying, and visualizing...	15	Experimental	6	Python
43	davidcamilo0710/P4Tree A novel approach based on Random Forests that quickly and accurately...	14	Experimental	9	P4
44	benderla/network-attack-detection Isolation Forest–based anomaly detection for network traffic using the...	14	Experimental	—	Jupyter Notebook
45	1410ailesi/ML-network-intrusion-detection-HAWK Detect network threats in IoT environments using optimized machine learning...	14	Experimental	—	Jupyter Notebook
46	AutomataNexus/NexusSentinel Facility Health Assessment for Edge Deployment — MLP autoencoder + severity...	14	Experimental	—	Rust
47	mehak6569/TOR-NonTOR Identifying TOR traffic from the Internet traffic	13	Experimental	7	Jupyter Notebook
48	surabhis16/NetAegis Web-based hybrid machine learning system that detects known and unknown...	11	Experimental	—	Jupyter Notebook
49	Unnimaya6122004/TRACE-FI MAJOR PROJECT	11	Experimental	—	—
50	SwayamKohli/GadaSoftwares-Samsung-2025 CATO: Classification of Application Traffic Online – An AI-powered,...	11	Experimental	—	JavaScript
51	hallucinaut/runtimebase Learn normal runtime behavior and detect security anomalies	11	Experimental	—	Go
52	EricM96/IoT-Network-Simulator A smart home network simulator for security research.	11	Experimental	2	Rust
53	RETR0-OS/NetworkAnalyser SniffHound is a network analysis tool designed to capture network packets,...	10	Experimental	1	JavaScript
54	kclick91/Behaviour-Detection-with-Hash-Functions A method to detect where a sequence of events are different.	10	Experimental	1	Java

Comparisons in this category

cesnet-models and DeepTraffic (55 vs 54) cesnet-datazoo and cesnet-models (58 vs 55)