Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, *BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as
packet capture and filtering libraries.
<BR><BR>
Its features include:
<ul>
                                                <li>Deep inspection of hundreds of protocols, with more being added all the time</li>
                                                <li>Live capture and offline analysis</li>
                                                <li>Standard three-pane packet browser</li>
                                                <li>Multi-platform: Runs on Windows, Linux, macOS, Solaris, FreeBSD, NetBSD, and many others</li>
                                                <li>Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility</li>
                                                <li>The most powerful display filters in the industry</li>
                                                <li>Rich VoIP analysis</li>
                                                <li>Read/write many different capture file formats: tcpdump (libpcap), Pcap NG, Catapult DCT2000, Cisco Secure IDS iplog, Microsoft Network Monitor, Network General Sniffer® (compressed and uncompressed), Sniffer® Pro, and NetXray®, Network Instruments Observer, NetScreen snoop, Novell LANalyzer, RADCOM WAN/LAN Analyzer, Shomiti/Finisar Surveyor, Tektronix K12xx, Visual Networks Visual UpTime, WildPackets EtherPeek/TokenPeek/AiroPeek, and many others</li>
                                                <li>Capture files compressed with gzip can be decompressed on the fly</li>
                                                <li>Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)</li>
                                                <li>Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2</li>
                                                <li>Coloring rules can be applied to the packet list for quick, intuitive analysis</li>
                                                <li>Output can be exported to XML, PostScript®, CSV, or plain text</li>
                                            </ul>

Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, *BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as
packet capture and filtering libraries.

Wireshark - Network Traffic Analyzer

DPDK is a set of libraries and drivers for fast packet processing. It was designed to run on any processors. The first supported CPU was Intel x86 and it is now extended to IBM Power 8, EZchip TILE-Gx and ARM. These libraries can be used to  receive and send packets within the minimum number of CPU cycles (usually less than 80 cycles), develop fast packet capture algorithms (tcpdump-like) and run third-party fast path stacks.


DPDK - Data Plan Development Kit

Windows Packet Divert (WinDivert) is a user-mode packet interception library for Windows 7, Windows 8 and Windows 10. WinDivert enables user-mode capturing/modifying/dropping of network packets
sent to/from the Windows network stack.  In summary, WinDivert can Capture network packets, Filter/drop network packets, Sniff network packets, (re)inject network packets, modify network packets. It can be used to implement user-mode packet filters, sniffers, firewalls, NATs, VPNs, IDSs, tunneling applications, etc.

Divert - Windows Packet Divert

 netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. 
<BR><BR>
 netsniff-ng is a fast network analyzer based on packet mmap(2) mechanisms. It can record pcap files to disc, replay them and also do an offline and online analysis. Capturing, analysis or replay of raw 802.11 frames are supported as well. pcap files are also compatible with tcpdump or Wireshark traces. netsniff-ng processes those pcap traces either in scatter-gather I/O or by mmap(2) I/O. 

 netsniff-ng is a free Linux networking toolkit, a Swiss army knife for your daily Linux network plumbing if you will. Its gain of performance is reached by zero-copy mechanisms, so that on packet reception and transmission the kernel does not need to copy packets from kernel space to user space and vice versa. 

netsniff-ng - The packet sniffing beast

Discover open source projects across all platforms

Projects

Wireshark - Network Traffic Analyzer

DPDK - Data Plan Development Kit

Divert - Windows Packet Divert

netsniff-ng - The packet sniffing beast

TechStack

Tagcloud

License

Suggested keywords:

Projects

Wireshark - Network Traffic Analyzer

DPDK - Data Plan Development Kit

Divert - Windows Packet Divert

netsniff-ng - The packet sniffing beast

TechStack

Tagcloud

License