An any-snarf program that processes application protocols (HTTP/FTP/...) from tcpdump or snoop files and stores session and file data

Chaosreader

MIT License

ptcpdump

the LIBpcap interface to various kernel packet capture mechanism

Other

libpcap

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

ngrep

:star: :star: Distributed tcpdump for cloud native environments :star: :star:

Chaosreader

ptcpdump

libpcap

ngrep

PacketStreamer

Chaosreader

ptcpdump

libpcap

PacketStreamer