14 lines
3.2 KiB
Markdown
14 lines
3.2 KiB
Markdown
# Packet Capture & Analysis Tools
|
|
|
|
CLI and TUI tools for capturing, dumping, filtering, analyzing, and visualizing network traffic — essential for diagnostics, forensics, pentesting, and reconnaissance.
|
|
|
|
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|
|
| ------------ | -------------------------- | ------------------------------------------------------------------------- | --------------------------------------------------------------------------------------- | ------------------------------------- | --------------------------- | ------------- | ----- |
|
|
| tcpdump | https://www.tcpdump.org/ | [the-tcpdump-group/tcpdump](https://github.com/the-tcpdump-group/tcpdump) | Powerful CLI packet capture and analyzer with advanced filtering expression support. | capture, analyzer, cli, c, pcap | ~Mar 2026 (very active) | 1988 | ~3k+ |
|
|
| tshark | https://www.wireshark.org/ | — (part of Wireshark repo) | CLI version of Wireshark for capturing, dumping, and dissecting network traffic. | capture, analyzer, cli, wireshark | ~Feb 2026 (Wireshark 4.6.4) | 1998 | — |
|
|
| Termshark | https://termshark.io/ | [gcla/termshark](https://github.com/gcla/termshark) | Terminal UI frontend for tshark with Wireshark-like interface and packet browsing. | capture, tui, wireshark, go | ~Jul 2022 (v2.4.0) | 2018 | ~7k+ |
|
|
| ngrep | — | [jpr5/ngrep](https://github.com/jpr5/ngrep) | Grep-like tool for searching and displaying network packets by string or regex pattern. | grep, capture, cli, c | ~Feb 2026 (v1.49.0) | 1999 | ~3k+ |
|
|
| netsniff-ng | http://netsniff-ng.org/ | [netsniff-ng/netsniff-ng](https://github.com/netsniff-ng/netsniff-ng) | High-performance toolkit for network sniffing, analysis, monitoring, and plumbing. | capture, toolkit, cli, c, performance | ~Jan 2025 (v0.6.9) | 2011 | ~3k+ |
|
|
| stenographer | — | [google/stenographer](https://github.com/google/stenographer) | High-speed packet capture spooler to disk for large-scale forensics and IDS buffering. | capture, spool, go, forensics | ~Nov 2020 (archived) | 2014 | ~2k+ |
|
|
| tcpterm | — | [sachaos/tcpterm](https://github.com/sachaos/tcpterm) | TUI visualizer for monitoring and displaying TCP packet streams in real time. | visualizer, tui, rust, tcp | ~Stable (low activity) | 2018 | ~1k+ |
|
|
| sockdump | — | [mechpen/sockdump](https://github.com/mechpen/sockdump) | Dumps Unix domain socket traffic for local debugging and protocol inspection. | socket, dump, cli, go, unix | ~Stable (low activity) | 2019 | — | |