tcpdump
Wireshark
| tcpdump | Wireshark | |
|---|---|---|
| 2 | 10 | |
| 2,552 | 6,661 | |
| 1.7% | 1.7% | |
| 9.5 | 10.0 | |
| 6 days ago | 3 days ago | |
| C | C | |
| GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
tcpdump
Wireshark
-
Wireshark & tcpdump: A Debugging Power Couple
To begin with Wireshark, visit their official website for the download. The installation process is straightforward, but attention should be paid to the installation of command-line tools, which may require separate steps. Upon launching Wireshark, users are greeted with a selection of network interfaces as seen below. Choosing the correct interface, such as the loopback for local server debugging, is crucial for capturing relevant data.
-
Best Hacking Tools for Beginners 2024
Wireshark
- Why is my LG Washing Machine using 3.6GB of data/day?
-
Non-IP networking
If you're very curious as to what is really going on under the hood, I recommend you familiarize yourself with port mirroring for your switch platform of choice, and then use a laptop in promiscuous mode to capture traffic using Wireshark. Failing that, hire a network engineer to interview one of their sales engineers or architects, and have them explain it to you.
-
Biscuit studying IPv6 with me
You should do a hands fins-on lab with Wireshark.
-
How to implement SSL/TLS pinning in Node.js
A great way to test the effectiveness of a pinning implementation is by simulating an MITM attack. Tools like Mitmproxy or Wireshack allow us to create a test environment to monitor, intercept, and proxy network requests for a test host.
-
Russia starts blocking VPN at the protocol (WireGuard, OpenVPN) level
They even have a nice comment explaining the heuristic: https://github.com/wireshark/wireshark/blob/ef9c79ae81b00a63...
* Heuristics to detect the WireGuard protocol: -
Rockwell L5X Vendor, ProductType, and ProductCode Lists
This has been put together for Wireshark, starting on line 1520 https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-cip.c
- Ask HN: Is there a tool to generate binary protocol figures out of a spec?
-
Network+ Wireshark classification question
Obviously based on the question you know the answer is a Wireshark-like software and it boils down to how you classify Wireshark. My issue is that Wikipedia refers to it as a Packet Analyzer, Varonis refers to it as a Packet Sniffer, Wireshark refers to itself as a Network Protocol Analyzer, Kali documentation refers to it as a Network Sniffer, Wireshark's README refers to itself as a Network Analyzer OR Sniffer...
What are some alternatives?
libpcap - the LIBpcap interface to various kernel packet capture mechanism
mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
binwalk - Firmware Analysis Tool
pyshark - Python wrapper for tshark, allowing python packet parsing using wireshark dissectors
ngrep - ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
mtr - Official repository for mtr, a network diagnostic tool
wavedrom - :ocean: Digital timing diagram rendering engine
Sysdig - Linux system exploration and troubleshooting tool with first class support for containers
bitfield - :cake: bit field diagram renderer
Dripcap
switch-lan-play - Enjoy games with your friends as if you were on a LAN.
Winshark - A wireshark plugin to instrument ETW