Gosniff: A TUI-Based Tcpdump
github.com
Gosniff: A TUI-Based Tcpdump
1–10 of 22 posts
Re: Gosniff: A TUI-Based Tcpdump
#2I like how each packet is broken out into layers. Would be helpful for learning about new protocols on the wire.
Re: Gosniff: A TUI-Based Tcpdump
#3I like how each packet is broken out into layers. Would be helpful for learning about new protocols on the wire.
This, for what it's worth, is a side-effect of using gopacket, which is a deceptively powerful library. You essentially have a big chunk of `tcpdump`'s encoding available to you any time you're working with packet buffers in Go, because of that library; for instance, to debug our BPF-based UDP stuff, there's an interface that shuttles packet snapshots over perf buffers and about 30 lines of Go code to read and decode those buffers. I was surprised at how much I got "for free" just by importing gopacket.
It's great, more people should do cool stuff with it.
Re: Gosniff: A TUI-Based Tcpdump
#4Neat project.
How does it compare to Wireshark' console cousin tshark?
Re: Gosniff: A TUI-Based Tcpdump
#5Neat project. How does it compare to Wireshark' console cousin tshark?
Once nice thing about this is that it's memory-safe, which is something you really want for a packet capture tool.
Re: Gosniff: A TUI-Based Tcpdump
#6Neat project. How does it compare to Wireshark' console cousin tshark?
My thoughts as well. Tshark supports a ton of dissectors. How does this project compare? Being in go, can it reuse the Wireshark dissectors that are written in C?
Re: Gosniff: A TUI-Based Tcpdump
#7reminds me of termshark at https://github.com/gcla/termshark also written in golang
Re: Gosniff: A TUI-Based Tcpdump
#8Hey everyone, I'm the original author of this library. This is actually my first software project ever-- I'm a full-time officer in the military who was just messing around. It's extremely flattering to see this shared so publicly, but I feel the need to pre-emptively apologize to readers. This is just a hobby project for now, but I would appreciate feedback.
Re: Gosniff: A TUI-Based Tcpdump
#9Hey everyone, I'm the original author of this library. This is actually my first software project ever-- I'm a full-time officer in the military who was just messing around. It's extremely flattering to see this shared so publicly, but I feel the need to pre-emptively apologize to readers. This is just a hobby project for now, but I would appreciate feedback.
Well done. At first glance the UI looks well organized. Will give a test drive. Thanks for putting your work out there!
Re: Gosniff: A TUI-Based Tcpdump
#10tshark[0][1] has been the go-to standard for CLI packet analysis for a long time. It'd be really nice if Gosniff provided some kind of documentation on how it differentiates itself from tshark.
[0] https://tshark.dev/ [1] https://blog.wireshark.org/2014/07/to-infinity-and-beyond-ca...