descriptionnetsniff-ng toolkit, the packet sniffing beast, staging tree
homepage URLhttp://netsniff-ng.org/
repository URLgit://github.com/borkmann/netsniff-ng.git
ownerdaniel.borkmann@tik.ee.ethz.ch
last changeWed, 12 Apr 2017 08:58:38 +0000 (12 10:58 +0200)
last refreshTue, 25 Apr 2017 15:41:20 +0000 (25 17:41 +0200)
content tags
add:
README
//////////////////////////////////////////////////////////////////////////////

                    netsniff-ng - the packet sniffing beast

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
                                         .      .
netsniff-ng is a free, performant       /(      )\
Linux network analyzer and            .' {______} '.
networking toolkit. If you will,       \ ^,    ,^ /
the Swiss army knife for network        |'O\  /O'|   _.<0101011>--
packets.                                > `'  '` <  /
                                        ) ,.==., (  |
Web: http://netsniff-ng.org          .-(|/--~~--\|)-'
                                    (      ___
The gain of performance is           \__.=|___E
reached by built-in zero-copy
mechanisms, so that on packet reception and transmission the kernel does not
need to copy packets from kernel space to user space, and vice versa.

The netsniff-ng toolkit's primary usage goal is to facilitate a network
developer's / hacker's daily Linux plumbing. It can be used for network
development, debugging, analysis, auditing or network reconnaissance. It
consists of the following fixed set of utilities:

  * netsniff-ng: a zero-copy packet analyzer, pcap capturing/replaying tool
  * trafgen: a multithreaded low-level zero-copy network packet generator
  * mausezahn [*]: high-level packet generator for appliances with Cisco-CLI
  * ifpps: a top-like kernel networking and system statistics tool
  * curvetun [*]: a lightweight curve25519-based multiuser IP tunnel
  * astraceroute: an autonomous system trace route and DPI testing utility
  * flowtop: a top-like netfilter connection tracking tool
  * bpfc: a [seccomp-]BPF (Berkeley packet filter) compiler, JIT disassembler

Note that tools marked with [*] should be considered as experimental for now,
and not used in production environments as they still need more work to be
fully stable and in line with others. You have been warned!

Each release can be verified with Git and GPG, here are the steps to do so:

 1) Import the maintainers public keys:
   git show maint-tklauser-pgp-pub | gpg --import
   git show maint-dborkman-pgp-pub | gpg --import
 2) Verify the Git tag:
   git tag -v <tag-name>

Carefully read the INSTALL document for the next steps in building netsniff-ng.
Note that the toolkit is still quite young and under heavy development, not
yet feature complete and in a quality level where we're satisfied with (i.e.
for mausezahn). However, we're on a good way towards tackling all these goals.

The netsniff-ng toolkit is an open source project covered by the GNU General
Public License, version 2.0. For any questions or feedback about netsniff-ng
you are welcome to leave us a message at <netsniff-ng@googlegroups.com>.

netsniff-ng is non-profit and provided in the hope, that it is found useful.
The current project status can be considered as "working". In general, all tools
have been tested by us to a great extend including their command-line options.
In fact, many of our tools are used in a lot of production systems. However, we
give no guarantee that our tools are free of bugs! If you spot some issues,
contact us as described in REPORTING-BUGS. Also, have a look at our online FAQ
for answering your questions. This project has received support from companies
and institutions listed in the according section in the AUTHORS file. Thanks for
contributing, we're thrilled to provide you with netsniff-ng! Happy packet
hacking!
shortlog
13 days ago Tobias Klausernetsniff-ng: remove unnecessary zeroing of packet count... master
2017-04-11 Tobias Klausernetsniff-ng v0.6.3v0.6.3
2017-03-06 Tobias Klausernetsniff-ng: nlmsg: Drop dissection of GENL_ID_GENERATE...
2017-03-02 Tobias Klauserdev: Fix buffer overflow in device_addr2str()
2017-02-09 Vadim Kochantrafgen: parser: Rename bytes -> mac
2017-02-09 Tobias Klauserbuild: Don't show echo commands in verbose mode
2017-02-09 Tobias Klausermake: Fix spelling yaac -> yacc
2017-02-09 Vadim Kochantrafgen: man: Add description with pcap file for -i...
2017-02-09 Vadim Kochantrafgen: Allow send packets from pcap file
2017-02-09 Vadim Kochanpcap_io: Add function to get packet timestamp
2017-02-06 Vadim Kochantrafgen: l3: Make possible to send frames via tun device
2017-02-06 Vadim Kochangeoip: Fix memory leak when using GeoIPRecord
2017-01-25 Vadim Kochantrafgen: l3: Fix checksum for UDP/TCP protos
2017-01-25 Vadim Kochanflowtop: Add process UI tab entry
2017-01-25 Vadim Kochanflowtop: Add tab control to switch between tables
2017-01-17 Tobias Klauserlist: Remove cds_list_* wrappers
...
tags
2 weeks ago v0.6.3 0.6.3 release
5 months ago v0.6.2 0.6.2 release
13 months ago v0.6.1 0.6.1 release
17 months ago v0.6.0 0.6.0 release
23 months ago v0.5.9 0.5.9 release
2 years ago v0.5.9-rc5 0.5.9-rc5 release
2 years ago v0.5.9-rc4 0.5.9-rc4 release
2 years ago v0.5.9-rc3 0.5.9-rc3 release
2 years ago v0.5.9-rc2 0.5.9-rc2 release
2 years ago v0.5.9-rc1 0.5.9-rc1 release
2 years ago v0.5.8 0.5.8 release
3 years ago v0.5.8-rc5 0.5.8-rc5 release
3 years ago v0.5.8-rc4 0.5.8-rc4 release
3 years ago v0.5.8-rc3 0.5.8-rc3 release
3 years ago v0.5.8-rc2 0.5.8-rc2 release
3 years ago v0.5.8-rc1 0.5.8-rc1 release
...
heads
13 days ago master
6 months ago coverity_scan