netsniff-ng

Abstract

netsniff-ng is a free, performant Linux network analyzer and networking toolkit.

The gain of performance is reached by zero-copy mechanisms, so that the kernel does not need to copy packets from kernelspace to userspace and vice versa.

For this purpose, the netsniff-ng toolkit is libpcap independent, but nevertheless supports the pcap file format for capturing, replaying and performing offline-analysis of pcap dumps. Furthermore, we are focussing on building a robust, clean and secure analyzer and utilities that complete netsniff-ng as a support for network development, debugging or network reconnaissance.

netsniff-ng consists of much more than only a network analyzer. The following utilities of the toolkit are in development for 0.5.6.0:

    netsniff-ng, the zero-copy analyzer, (pcap) capturing and replayer itself
    trafgen, a zero-copy traffic generator
    bpfc, a Berkeley Packet Filter (BPF) compiler
    ifpps, a top-like kernel networking statistics tool
    curvetun, a lightweight multiuser IP tunnel based on elliptic curve cryptography (ECC)
    ashunt, an Autonomous System (AS) trace route utility

Read more: netsniff-ng
QR:

Posted via email from Jasper-net