from Hacker News

Termshark – A terminal UI for tshark, inspired by Wireshark

by gautamsomani on 12/5/23, 2:32 PM with 21 comments

  • by Linux-Fan on 12/5/23, 7:03 PM

    Termshark can be a live saver if you need to analyze large packet captures. The GUI of Wireshark was almost unusable with some large (30 GiB or something?) capture on my development laptop and some filters. Termshark did not process that data quickly but at least allowed me to get the job done.
  • by ape4 on 12/5/23, 3:24 PM

    Of course, sending traffic to the terminal is network traffic so you need to exclude it when you're monitoring.
  • by jaimehrubiks on 12/5/23, 3:36 PM

    Many times I Google something like "Wireshark from remote ssh" and I manage to stream the remote tshark stream to my local Wireshark UI. However, this is very interesting and welcoming project, and I guess it will make it simpler in many use cases
  • by sonicanatidae on 12/5/23, 5:16 PM

    Nice tool. I don't use WireShark every day, but this will be handy for the times I'm breaking it out.

    Thanks!

  • by JoshTriplett on 12/5/23, 4:45 PM

    This looks impressive! The UI looks nice to use, and I'd probably use this instead of wireshark the next time I'm doing network analysis.

    Another "why": you want to do live capture and analysis, but don't want to run a GUI program as root for a variety of reasons.

  • by equanos on 12/5/23, 8:07 PM

    The one thing i never looked for but want to instal asap! 10 extra points for using Go.
  • by threatofrain on 12/5/23, 7:24 PM

    I don't mean to ask a crass question, but is the project potentially abandoned? It certainly still gets issues but hasn't received updates for a long time.
  • by spacecadet on 12/5/23, 4:36 PM

    As a regular tshark/pyshark user, where much of the output is CLI, I enjoy this.
  • by letwhile on 12/5/23, 8:15 PM

    This project exists since more than 4 years. No need to bump without any news or comment.