Last reviewed against v0.9.0
source:
internal/tools/packet_capture.go Packet capture
libpcap capture, per-interface, BPF filter, live packet count, dissected protocols.
libpcap-backed capture. Pick an interface, set a BPF filter (tcp port 443, host 10.0.5.7, etc.), hit Start.
Live view
- Packet count
- Bytes
- Per-protocol dissection (Ethernet → IP → TCP/UDP → application layer)
- One-click expand for the full dissection of a single packet
Export
Save the capture as a .pcap for Wireshark / tshark, or export the dissected JSON.