tcpdump Alternatives for Linux
There are many alternatives to tcpdump for Linux if you are looking for a replacement. The best Linux alternative is Wireshark, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 10 alternatives to tcpdump and seven of them are available for Linux so hopefully you can find a suitable replacement. Other interesting Linux alternatives to tcpdump are Sysdig, Driftnet, tcpflow and httpry.
tcpdump alternatives are mainly Network Analyzers but may also be Network Monitors. Filter by these if you want a narrower list of alternatives or looking for a specific functionality of tcpdump.
- Free • Open Source
- Mac
- Windows
- Linux
- BSD
Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.
- Free • Open Source
- Mac
- Windows
- Linux
Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce.
No screenshots yetDriftnet is a program which listens to network traffic and picks out images from TCP streams it observes.
tcpflow, a TCP Flow Recorder, is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging.
httpry is a tool designed for displaying and logging HTTP traffic. It is not intended to perform analysis itself, but instead to capture, parse and/or log the traffic for later analysis.
No screenshots yet
justniffer is a TCP sniffer. It reassembles and reorders packets and displays the tcp flow in a customizable way. It can log network traffic in web server log format. It can also log network services performances and extract http content.
No screenshots yet
If you're debugging on a remote machine with a large pcap and no desire to scp it back to your desktop, termshark can help!
No screenshots yet