Seems like there would be at least some overlap with Metron[1] and/or Spot[2].
Of the two, I'm more familiar with Metron (I actually did a small amount of work on it back before it was an Apache project). The core "thing" of Metron was always a large-scale, high-speed packet capture mechanism that would allow you to apply real-time streaming analytics / ML to packet streams, as well as supporting indexing the packets with ElasticSearch for post-hoc retrieval / analysis.
Spot seems to employ some similar ideas, but I haven't dug into it as deeply.
Of the two, I'm more familiar with Metron (I actually did a small amount of work on it back before it was an Apache project). The core "thing" of Metron was always a large-scale, high-speed packet capture mechanism that would allow you to apply real-time streaming analytics / ML to packet streams, as well as supporting indexing the packets with ElasticSearch for post-hoc retrieval / analysis.
Spot seems to employ some similar ideas, but I haven't dug into it as deeply.
[1]: https://metron.apache.org/
[2]: https://spot.apache.org/