jpr5/ngrep
View on GitHub ↗ ★ 1,025 C
ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
3 mentions on Hacker News by 3 people: 1 story, 2 comments · first 2018-05-30 · latest 2024-04-07
20082026
-
▲ 2
Ngrep – GNU grep applied to the network layerstory by bfoks · 2024-04-07 · 0 comments
-
…a nice tool, that could be a good alternative to ngrep that I usually rely on on the command line. https://github.com/jpr5/ngrep
comment by lloeki · 2019-04-23 · in Termshark – A terminal UI for tshark, inspired by Wireshark -
…itself as in tcp[((tcp[12:1] & 0xf0) >> 2):4]. Also sometimes I reach for ngrep if it is installed: https://github.com/jpr5/ngrep/blob/master/EXAMPLES.md
comment by rdtsc · 2018-05-30 · in Tcpdump Examples