5 projects tagged "Packet Capturing"
Updated 29 Jun 2012
netsniff-ng
| Pop | 144.00 |
|---|---|
| Vit | 5.57 |
netsniff-ng is a high performance Linux network sniffer for packet inspection. It is similar to analyzers like tcpdump, but without the need to perform system calls for fetching network packets. A memory-mapped area within kernelspace will be used for accessing packets, so there is no requirement for copying them to userspace (a 'zero-copy' mechanism). For this purpose, netsniff-ng is libpcap independent, but nevertheless supports the pcap file format for capturing, replaying, and performing offline analysis of pcap dumps. The project is focused on building a robust, clean, and secure analyzer and utilities that complete netsniff-ng as a support for penetration testing. netsniff-ng can be used for protocol analysis, reverse engineering, and network debugging.
Updated 07 Feb 2010
Open Unified Recording
| Pop | 44.32 |
|---|---|
| Vit | 34.70 |
Open Unified Recording (OUR) is a full featured Linux-based VoIP/SIP call recording engine, indexing, and retrieval system. The system resides on the network and passively captures SIP sessions.
Updated 10 Aug 2010
catnip
| Pop | 32.92 |
|---|---|
| Vit | 1.00 |
catnip is a tiny network packet capturing tool that is not based on libpcap. When compiled and stripped, the binary is smaller than 20kiB. This makes it very suitable for embedded environments where a libpcap-based tool, typically 100kiB for just libpcap and 500kiB for tcpdump, would be simply too large. catnip is generally parameter compatible with tcpdump and what makes catnip stand out from other small packet capturing tools is that also supports BPF filtering.
Updated 29 Apr 2013
JunkieTheSniffer
| Pop | 328.96 |
|---|---|
| Vit | 22.69 |
Junkie is a real-time packet sniffer and analyzer. It is modular enough to accomplish many different tasks. It can be a helpful companion to the modern network administrator and analyst. Compared to previously available tools, junkie lies in between tcpdump and wireshark. Unlike tcpdump, its purpose is to parse protocols of any depth; unlike wireshark, though, it is designed to analyze traffic in real-time and so cannot parse traffic as completely as wireshark does. In addition, its design encompasses extendability and speed. It has a plug-in system and high-level extension language that eases the development and combination of new functionalities; threaded packet capture and analysis for handling of high bandwidth networks; and a modular architecture to ease the addition of any protocol layer. It is based on libpcap for portability, and well-tested on professional settings.
Updated 27 Nov 2011
tcpdump
| Pop | 73.42 |
|---|---|
| Vit | 1.00 |
tcpdump prints a description of the contents of packets on a network interface which match a given boolean expression. It can also be run with the -w flag, which causes it to save the packet data to a file for later analysis, and/or with the -r flag, which causes it to read from a saved packet file rather than to read packets from a network interface. In all cases, only packets which match the expression will be processed by tcpdump. tcpdump logs more than just TCP, IP, or ethernet packets, but has a whole suite of decoders, including ones for USB.
