diff --git a/README.md b/README.md
index 603f139..1f52157 100644
--- a/README.md
+++ b/README.md
@@ -320,6 +320,8 @@ the [browser malware](#browser-malware) section.*
 
 * [Bro](https://www.bro.org) - Protocol analyzer that operates at incredible
   scale; both file and network protocols.
+* [chopshop](https://github.com/MITRECND/chopshop) - Protocol analysis and
+  decoding framework.
 * [Fiddler](http://www.telerik.com/fiddler) - Intercepting web proxy designed
   for "web debugging."
 * [Hale](https://github.com/pjlantz/Hale) - Botnet C&C monitor.