Dripcap Packet Analyzer

#1

Post by n_yuichi » Sat, Sep 24, 2016, 7:45 AM UTC

Re: Dripcap Packet Analyzer

#2

Post by electic » Sat, Sep 24, 2016, 7:52 AM UTC

I have to say the screenshots looked really good however I could not get this to work on OSX. It starts up, however, it won't let me enter a session name or start a capture session if I hit play. Hope it improves tho.

Re: Dripcap Packet Analyzer

#3

Post by lossolo » Sat, Sep 24, 2016, 11:48 AM UTC

And why it's "next generation" ? Main site that is linked in github repo is not working for me. There is only screenshot, nothing else. From the screenshot it seems like very simple packet analyzer. I don't see any reason this is "next gen" or why i should use this instead of WireShark.

Re: Dripcap Packet Analyzer

#4

Post by AstroJetson » Sat, Sep 24, 2016, 11:58 AM UTC

Same question, why is this better than Wireshark. Can I do custom packet analysis and packet matching? Is there a better scripting engine? (I love Lua hooks in Wireshark, makes it easy to pull apart complex traces / flows.)

Re: Dripcap Packet Analyzer

#5

Post by ziffusion » Sat, Sep 24, 2016, 1:05 PM UTC

lossolo wrote: post #3

And why it's "next generation" ? Main site that is linked in github repo is not working for me. There is only screenshot, nothing else. From the screenshot it seems like very simple packet analyzer. I don't see any reason this is "next gen" or why i should use this instead of WireShark.

There's a github wiki with a little more info. But not much.

Re: Dripcap Packet Analyzer

#6

Post by jan3000 » Sat, Sep 24, 2016, 1:47 PM UTC

AstroJetson wrote: post #4

Same question, why is this better than Wireshark. Can I do custom packet analysis and packet matching? Is there a better scripting engine? (I love Lua hooks in Wireshark, makes it easy to pull apart complex traces / flows.)

Looks like it's a NodeJS app wrapped in Electron shell, parsing/analyzing packets via "packages" (implemented via ES6 modules).

I guess that what makes it "Next generation" :)

Maybe the article poster or the author could enlighten us on how and why this implementation might match Wireshark's proven track records...

Re: Dripcap Packet Analyzer

#7

Post by paperwork » Sat, Sep 24, 2016, 3:08 PM UTC

There doesn't seem to be a windows binary.

Re: Dripcap Packet Analyzer

#8

Post by 0xFFC » Sat, Sep 24, 2016, 3:12 PM UTC

It's UI looks very nice. I hope all native UI's die as soon aa possible. What is last time you have tried gtk on Windows? Or Qt in gnome (yes I know, with some tweaking, it would be better). All of them feel so inconsistent together. At the other hand Web UI (and electron apps) is so nice to work with I don't even consider using native one when there is one with electron engine available.

Re: Dripcap Packet Analyzer

#9

Post by mynewtb » Sat, Sep 24, 2016, 3:24 PM UTC

jan3000 wrote: post #6

AstroJetson wrote: post #4

Same question, why is this better than Wireshark. Can I do custom packet analysis and packet matching? Is there a better scripting engine? (I love Lua hooks in Wireshark, makes it easy to pull apart complex traces / flows.)

Looks like it's a NodeJS app wrapped in Electron shell, parsing/analyzing packets via "packages" (implemented via ES6 modules). I guess that what makes it "Next generation" :) Maybe the article poster or the author could enlighten us on how and why this implementation might match Wireshark's proven track records...

Nice, this will be full of opportunities to pwn researchers via remote exploitation then.

Re: Dripcap Packet Analyzer

#10

Post by mumphster » Sat, Sep 24, 2016, 3:56 PM UTC

0xFFC wrote: post #8

It's UI looks very nice. I hope all native UI's die as soon aa possible. What is last time you have tried gtk on Windows? Or Qt in gnome (yes I know, with some tweaking, it would be better). All of them feel so inconsistent together. At the other hand Web UI (and electron apps) is so nice to work with I don't even consider using native one when there is one with electron engine available.

Qt isn't native.