Wireshark Alternatives for Linux
There are many alternatives to Wireshark for Linux if you are looking for a replacement. The best Linux alternative is tcpdump, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 50 alternatives to Wireshark and 19 are available for Linux so hopefully you can find a suitable replacement. Other interesting Linux alternatives to Wireshark are CloudShark, Intercepter-NG, Nethogs and Ettercap.
Wireshark alternatives are mainly Network Analyzers but may also be Network Monitors or HTTP(S) Debuggers. Filter by these if you want a narrower list of alternatives or looking for a specific functionality of Wireshark.
tcpdump is a common packet analyzer that runs under the command line. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached.
tcpdump vs Wireshark opinions
It's open source and use CLI
A web based platform that lets you view, analyze, and share packet capture files in a browser. Works in Safari for iPad and iPhone.
- Free • Proprietary
- Mac
- Windows
- Linux
- Android
- iPhone
- Android Tablet
- BSD
- iPad
Intercepter-NG is a multifunctional network toolkit for various types of IT specialists.
Discontinued
App unavailable on Play Store and website is flagged by modern browsers as potentially malicious.
Warning
Website blocked by modern browsers as possible trojan.
NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most tools do, it groups bandwidth by process.
Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks.
- Free • Open Source
- Mac
- Windows
- Linux
Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce.
No screenshots yetDisplays active TCP connections, ports on which the computer is listening, Ethernet statistics, the IP routing table, IPv4 statistics (for the IP, ICMP, TCP, and UDP protocols), and IPv6 statistics (for the IPv6, ICMPv6, TCP over IPv6, and UDP over IPv6 protocols).
No screenshots yetDriftnet is a program which listens to network traffic and picks out images from TCP streams it observes.
Ostinato is a network packet and traffic generator and analyzer with a friendly GUI. It aims to be "Wireshark in Reverse" and thus become complementary to Wireshark. It features custom packet crafting with editing of any field for several protocols: Ethernet, 802.
Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more.
