Network Traffic Classification ML Frameworks

ML models and frameworks for classifying network traffic patterns, protocols, and anomalies in real-time or batch processing. Includes encrypted traffic analysis, DPI alternatives, and flow-based identification. Does NOT include general network monitoring tools, packet capture utilities without ML classification, or broader cybersecurity frameworks not focused on traffic categorization.

There are 61 network traffic classification frameworks tracked. 1 score above 70 (verified tier). The highest-rated is GACWR/OpenUBA at 70/100 with 470 stars.

Get all 61 projects as JSON

curl "https://pt-edge.onrender.com/api/v1/datasets/quality?domain=ml-frameworks&subcategory=network-traffic-classification&limit=20"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.

#	Framework	Score	Tier	Stars	Language
1	GACWR/OpenUBA A robust, and flexible open source User & Entity Behavior Analytics (UEBA)...	70	Verified	470	Python
2	nfstream/nfstream NFStream: a Flexible Network Data Analysis Framework.	66	Established	1,197	Python
3	echowei/DeepTraffic Deep Learning models for network traffic classification	61	Established	763	Python
4	faucetsdn/poseidon Poseidon is a python-based application that leverages software defined...	57	Established	430	Python
5	CESNET/cesnet-datazoo CESNET DataZoo: A toolset for large network traffic datasets	56	Established	44	Python
6	CESNET/cesnet-models CESNET Models: Neural networks for network traffic classification	56	Established	22	Python
7	nextcloud/suspicious_login Detect and warn about suspicious IPs logging into Nextcloud	55	Established	102	PHP
8	deepfence/FlowMeter ⭐ ⭐ Use ML to classify flows and packets as benign or malicious. ⭐ ⭐	50	Established	1,188	Go
9	munhouiani/Deep-Packet Pytorch implementation of deep packet: a novel approach for encrypted...	48	Emerging	250	Jupyter Notebook
10	p4lang/p4app-switchML Switch ML Application	48	Emerging	201	C++
11	brent-stone/CAN_Reverse_Engineering Automated Payload Reverse Engineering Pipeline for the Controller Area...	47	Emerging	440	Python
12	stefanDeveloper/heiFIP heiFIP: A tool to convert network traffic into images for ML use cases	46	Emerging	29	C++
13	stdlib-js/datasets-suthaharan-multi-hop-sensor-network Labeled wireless sensor network data set collected from a multi-hop wireless...	41	Emerging	2	JavaScript
14	nds-group/ETC_NOMS_2024 Encrypted Traffic Classification at Line Rate in Programmable Switches with...	41	Emerging	19	Python
15	kahramankostas/Anomaly-Detection-in-Networks-Using-Machine-Learning A thesis submitted for the degree of Master of Science in Computer Networks...	41	Emerging	237	Jupyter Notebook
16	IndexFziQ/ML-ATIC Abnormal Traffic Identification Classifier based on Machine Learning. My...	40	Emerging	30	Java
17	stdlib-js/datasets-suthaharan-single-hop-sensor-network Labeled wireless sensor network data set collected from a simple single-hop...	40	Emerging	2	JavaScript
18	rickyzhang82/V2Ray-Deep-Packet-Inspection Notebook demo V2Ray traffic classification by deep packet inspection	39	Emerging	164	Jupyter Notebook
19	jogecodes/transformerAD Code for the paper "Anomaly-Based Intrusion Detection in IIoT Networks Using...	35	Emerging	36	Jupyter Notebook
20	WithHades/network_traffic_classification_paper 收集了部分将机器学习应用于网络流量分类的论文	35	Emerging	174	—
21	ait-aecid/rootkit-detection-ebpf-time-trace Detection of rootkit file hiding activities through analysis of shifts in...	34	Emerging	29	Python
22	jwd164/space-cyber-anomaly-detection-dataset The SCAD dataset provides high-fidelity satellite telemetry under both...	33	Emerging	13	Jupyter Notebook
23	DoHaiSon/BNaT BNaT: Blockchain Network Attack Traffic Dataset	33	Emerging	6	—
24	aliebayani/IoT-Devices-Intrusion-Detection Integrating CNN-LSTM Networks with Statistical Filtering Techniques for...	31	Emerging	14	Python
25	AreejFatimaz/Network-Traffic-Analysis-using-Machine-Learning This project focuses on implementing anomaly detection in computer networks...	31	Emerging	4	Jupyter Notebook
26	rubenpjove/tabularT-OS-fingerprinting This repository employs two different architectures of Tabular Transformer...	31	Emerging	3	Jupyter Notebook
27	ashwinn-v/Traffic-classifier-SDN A system that could classify DNS, Telnet, Ping, Voice, Game, and Video...	30	Emerging	44	Python
28	Md-Emon-Hasan/ML-Project-Intrusion-Detection-Systems-Anomaly-Detection-with-ML-DL 🔒 Leverages Machine Learning and Deep Learning models to identify malicious...	30	Emerging	2	Jupyter Notebook
29	CESNET/cesnet-tcexamples Jupyter notebooks with traffic classification examples using CESNET DataZoo...	30	Emerging	10	Jupyter Notebook
30	talshapira/ODE-Flow Based on the paper "Fast and lean encrypted Internet traffic...	28	Experimental	10	Jupyter Notebook
31	Rachico/deep-sdn Intelligent SDN traffic classification using deep learning : Generating and...	28	Experimental	10	Jupyter Notebook
32	shaeferd/Network-Traffic-Prediction Ensemble Model for Network Intrusion Detection and Prevention	26	Experimental	2	Python
33	geetika016/NetworkTrafficAnalyzer Flask Application to Analyze and Visualize Network Traffic Data using...	25	Experimental	2	JavaScript
34	DuseTrive/Anomaly-Based-NID-using-svm This project uses SVM and AI to create an efficient tool for detecting...	24	Experimental	1	Jupyter Notebook
35	rogue-agent1/pcapsum Network connection summary: list, filter, group by process/port.	22	Experimental	—	Python
36	eugen-goebel/network-threat-analyzer Multi-agent network threat detection combining rule-based signatures with ML...	22	Experimental	—	Python
37	isadfrn/network-threat-classifier This repository contains Python scripts for analyzing network traffic data...	22	Experimental	—	Python
38	roshnrf/PIRS 9-layer ML pipeline that predicts insider threats 3–14 days before they...	22	Experimental	—	Python
39	davidcamilo0710/P4Tree A novel approach based on Random Forests that quickly and accurately...	21	Experimental	9	P4
40	Anurag-Dutta/KAN-Vis Visual Technique for Network Traffic Classification	21	Experimental	—	Jupyter Notebook
41	sirius-22/ml-intrusion-detection-ics Bachelor's Thesis: Applications of Machine Learning Techniques for Intrusion...	21	Experimental	—	TeX
42	mehak6569/TOR-NonTOR Identifying TOR traffic from the Internet traffic	20	Experimental	7	Jupyter Notebook
43	Wahid7852/untor-tor Tor traffic analysis platform for extracting, classifying, and visualizing...	19	Experimental	6	Python
44	EricM96/IoT-Network-Simulator A smart home network simulator for security research.	18	Experimental	2	Rust
45	kclick91/Behaviour-Detection-with-Hash-Functions A method to detect where a sequence of events are different.	17	Experimental	1	Java
46	Martynka123-code/Online-machine-learning-based-packet-classification-project Real-time network traffic classifier using dual-path Machine Learning...	17	Experimental	1	Python
47	1410ailesi/ML-network-intrusion-detection-HAWK Detect network threats in IoT environments using optimized machine learning...	14	Experimental	—	Jupyter Notebook
48	AutomataNexus/NexusSentinel Facility Health Assessment for Edge Deployment — MLP autoencoder + severity...	14	Experimental	—	Rust
49	SwayamKohli/GadaSoftwares-Samsung-2025 CATO: Classification of Application Traffic Online – An AI-powered,...	13	Experimental	—	JavaScript
50	Unnimaya6122004/TRACE-FI MAJOR PROJECT	13	Experimental	—	—
51	hallucinaut/runtimebase Learn normal runtime behavior and detect security anomalies	13	Experimental	—	Go
52	RETR0-OS/NetworkAnalyser SniffHound is a network analysis tool designed to capture network packets,...	12	Experimental	1	JavaScript
53	kahramankostas/Multi-class-attack-detection-on-NSL-KDD-dataset-using-TabTransformer Multi-class attack detection on NSL-KDD dataset using TabTransformer	12	Experimental	5	Jupyter Notebook
54	benderla/network-attack-detection Isolation Forest–based anomaly detection for network traffic using the...	11	Experimental	—	Jupyter Notebook
55	aosman2013/https_traffic_classification Enhancing Encrypted HTTPS Traffic Classification Based on Stacked Deep...	11	Experimental	2	—
56	ecabanerof/AttackDetectionInNetworkFlows A comprehensive framework for detecting anomalies in network traffic using...	11	Experimental	2	Jupyter Notebook
57	ShubhamPaliwal03/TrafficTracer A web application for botnet detection using Machine Learning - XGBoost,...	11	Experimental	2	HTML
58	surabhis16/NetAegis Web-based hybrid machine learning system that detects known and unknown...	11	Experimental	—	Jupyter Notebook
59	Anurag-Dutta/RISK-4-Auto Visual Technique for In-Vehicle Network Traffic Classification	11	Experimental	—	Jupyter Notebook
60	nedjoni/mlnworkidentification Machine Learning Network Traffic Identification	11	Experimental	—	HTML
61	shreeramdrao/traffic-classification-using-deep-learning This project focuses on classifying network traffic into different...	10	Experimental	2	Jupyter Notebook

Comparisons in this category

DeepTraffic and cesnet-models (61 vs 56) cesnet-datazoo and cesnet-models (56 vs 56)