An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data

Chaosreader

MIT License

ptcpdump

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

Other

ngrep

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

Apache License 2.0

PacketStreamer

the LIBpcap interface to various kernel packet capture mechanism

Chaosreader

ptcpdump

ngrep

PacketStreamer

Chaosreader

ptcpdump

libpcap

ngrep

PacketStreamer