There are many alternatives to tcpdump for Linux if you are looking for a replacement. The best Linux alternative is Wireshark, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 25 alternatives to tcpdump and 13 are available for Linux so hopefully you can find a suitable replacement. Other interesting Linux alternatives to tcpdump are NetworkMiner, Sysdig, Termshark and Justniffer.
Wireshark is a premier network protocol analyzer used globally in industries and education, offering multi-platform support, deep protocol inspection, powerful display filters, and VoIP analysis. It allows both live capture and offline analysis, supporting various networks and protocols.
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can extract transmitted files and certificates from PCAP files containing HTTP, FTP, SMB, SMB2, TFTP and several other protocols.
Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce.
justniffer is a TCP sniffer. It reassembles and reorders packets and displays the tcp flow in a customizable way. It can log network traffic in web server log format. It can also log network services performances and extract http content.
correctly extract the tcp content
Discover and capture container network traffic from your comfy desktop Wireshark, using a containerized service and a Wireshark plugin.
United States
Sweden
EU
Belgium
Germany
good for tracing on remote machine