master/docs/security/pentest-recon-enum/Packet Capture & Analysis.md

1.4 KiB

Name Vendor/Webpage GitHub Repo Brief Description Tags Latest Commit
tcpdump https://www.tcpdump.org/ — Powerful CLI packet capture and analyzer with filtering expression support. [capture, analyzer, cli, c] Active
tshark https://www.wireshark.org/ — CLI version of Wireshark for dumping and analyzing network traffic. [capture, analyzer, cli] Active
Termshark https://termshark.io/ — (source on GitHub) Terminal UI frontend for tshark with Wireshark-like interface. [capture, tui, wireshark, go] Active
ngrep — jpr5/ngrep Grep-like tool for searching network packets by string/pattern. [grep, capture, cli, c] Stable
netsniff-ng http://netsniff-ng.org/ — High-performance toolkit for network sniffing, analysis, and plumbing. [capture, toolkit, cli, c] Active
stenographer — google/stenographer High-speed packet capture spooler to disk for later analysis. [capture, spool, go] ~Older
tcpterm — sachaos/tcpterm TUI visualizer for TCP packet streams. [visualizer, tui, rust] Stable
sockdump — mechpen/sockdump Dumps Unix domain socket traffic for debugging. [socket, dump, cli, go] Stable