3.2 KiB
3.2 KiB
Packet Capture & Analysis Tools
CLI and TUI tools for capturing, dumping, filtering, analyzing, and visualizing network traffic — essential for diagnostics, forensics, pentesting, and reconnaissance.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|---|---|---|---|---|---|---|---|
| tcpdump | https://www.tcpdump.org/ | the-tcpdump-group/tcpdump | Powerful CLI packet capture and analyzer with advanced filtering expression support. | capture, analyzer, cli, c, pcap | ~Mar 2026 (very active) | 1988 | ~3k+ |
| tshark | https://www.wireshark.org/ | — (part of Wireshark repo) | CLI version of Wireshark for capturing, dumping, and dissecting network traffic. | capture, analyzer, cli, wireshark | ~Feb 2026 (Wireshark 4.6.4) | 1998 | — |
| Termshark | https://termshark.io/ | gcla/termshark | Terminal UI frontend for tshark with Wireshark-like interface and packet browsing. | capture, tui, wireshark, go | ~Jul 2022 (v2.4.0) | 2018 | ~7k+ |
| ngrep | — | jpr5/ngrep | Grep-like tool for searching and displaying network packets by string or regex pattern. | grep, capture, cli, c | ~Feb 2026 (v1.49.0) | 1999 | ~3k+ |
| netsniff-ng | http://netsniff-ng.org/ | netsniff-ng/netsniff-ng | High-performance toolkit for network sniffing, analysis, monitoring, and plumbing. | capture, toolkit, cli, c, performance | ~Jan 2025 (v0.6.9) | 2011 | ~3k+ |
| stenographer | — | google/stenographer | High-speed packet capture spooler to disk for large-scale forensics and IDS buffering. | capture, spool, go, forensics | ~Nov 2020 (archived) | 2014 | ~2k+ |
| tcpterm | — | sachaos/tcpterm | TUI visualizer for monitoring and displaying TCP packet streams in real time. | visualizer, tui, rust, tcp | ~Stable (low activity) | 2018 | ~1k+ |
| sockdump | — | mechpen/sockdump | Dumps Unix domain socket traffic for local debugging and protocol inspection. | socket, dump, cli, go, unix | ~Stable (low activity) | 2019 | — |