1. argus
http://qosient.com/argus/
2.networkmine
3.tcpxtract
4.findsmtpinfo.py
5.docxtrack
5. smtpdump
6.http://jnetpcap.com/
7.https://labs.ripe.net/Members/wnagele/large-scale-pcap-data-analysis-using-apache-hadoop
8.https://github.com/cnbird1999/hadoop-pcap
9.https://github.com/aol/moloch
10.http://www.sans.org/reading-room/whitepapers/detection/security-analytics-fun-splunk-packet-capture-file-pcap-34580
11.http://www.net.in.tum.de/fileadmin/TUM/members/muenz/documents/muenz08wireshark.pdf
12.http://nsmwiki.org/Argus
13.https://www.linux-magazine.com/w3/issue/75/Argus.pdf
http://forensicscontest.com/