Termshark

tShark is a network protocol analyzer that acts as a network sniffer. To be more precise, it allows you to capture packets from live networks or read them from a previously saved file. It can be a powerful tool for anyone interested in analyzing the network traffic in real-time or learn minute details about the connection that enables the detection of anomalies, problems and trends.

Inspired by Wireshark, Termshark is a terminal GUI for tShark that can come in handy when you are debugging on remote machines using a relatively large pcap. According to the developer, it can be a godsent if you prefer not to scp the pcap files back to your desktop.

You should bear in mind that the reading and sniffing of the live interfaces can only be done where the application is permitted. The app enables you to inspect packets individually using the same view as Wireshark and uses display filters to exhibit live captures and pcaps. You can copy various ranges of packets to the clipboard so you can further analyze them using other third-party tools.

The developer plans to extend the functionality of the utility in the future, so that it can highlight packets using coloring rules, show statistics, view the reassembled stream or allow you to read from available interfaces once the UI is launched, just to name a few.