Skip to content
SPECIFICTION
Get listed

netsniff-ng

netsniff-ng.org

Free plan Linux
Visit netsniff-ng.org
Spec score 7.4 #13 of 22 in Network Packet Capture Software

What it is

netsniff-ng is a free Linux network analyzer and toolkit for network development, debugging, analysis, auditing, and reconnaissance. It captures, analyzes, replays, and redirects traffic using zero-copy packet mechanisms, with live capture, command-line operation, display filters, and offline trace analysis. Supported capture files include tcpdump-capable pcap, a nanosecond-resolution tcpdump-capable variant, Alexey Kuznetzov's pcap, and netsniff-ng pcap. Low- and high-level filtering include Berkeley Packet Filter expressions. The toolkit combines netsniff-ng, trafgen, mausezahn, ifpps, curvetun, astraceroute, flowtop, and bpfc. Its dissector covers Ethernet, WLAN, ARP, MPLS, VLAN, LLDP, IPv4, IPv6, ICMP, IGMP, TCP, and UDP. Mausezahn and curvetun are experimental and not advised for production. The toolkit is GPL 2.0 open source. Release checks use Git tags and GPG signatures; support is through a mailing list and online FAQ.

Spec sheet

Purpose
netsniff-ng is a free Linux network analyzer and networking toolkit for network development, debugging, analysis, auditing, and reconnaissance.Read 7 Oct 2026 · github.com
Platforms
The toolkit supports Linux operating systems with CONFIG_PACKET_MMAP enabled; its FAQ recommends a kernel version of 2.6.31 or newer.Read 7 Oct 2026 · netsniff-ng.github.io
Support
The project directs users to its mailing list and online FAQ for questions and feedback.Read 7 Oct 2026 · github.com
License
The toolkit is open source under the GNU General Public License version 2.0.Read 7 Oct 2026 · github.com
Capture formats
It captures and reads pcap files that interoperate with other packet-analysis tools.Read 7 Oct 2026 · netsniff-ng.github.io
Experimental utilities
The project marks mausezahn and curvetun as experimental and advises against using them in production.Read 7 Oct 2026 · github.com
Filtering
netsniff-ng supports low-level and high-level packet filters, including Berkeley Packet Filter expressions.Read 7 Oct 2026 · man7.org
Limitations
The project says it provides no guarantee that its tools are free of bugs.Read 7 Oct 2026 · github.com
Packet capture
netsniff-ng captures, analyzes, replays, and redirects network traffic using zero-copy packet mechanisms.Read 7 Oct 2026 · github.com
Protocol analysis
Its built-in dissector supports Ethernet, WLAN, ARP, MPLS, VLAN, LLDP, IPv4, IPv6, ICMP, IGMP, TCP, and UDP.Read 7 Oct 2026 · man7.org
Release verification
The project provides instructions for verifying releases using Git tags and GPG signatures.Read 7 Oct 2026 · github.com
Toolkit components
The toolkit includes netsniff-ng, trafgen, mausezahn, ifpps, curvetun, astraceroute, flowtop, and bpfc.Read 7 Oct 2026 · github.com

Plans and prices

netsniff-ng toolkit Free Free, open-source toolkit under GNU GPL 2.0 Read 7 Oct 2026 · github.com

Every netsniff-ng plan and price →

Strong points and limits

Strong points

  • Free GPL 2.0 toolkit
  • Live and offline trace analysis
  • Several pcap capture formats
  • Berkeley Packet Filter expressions supported
  • Broad built-in protocol dissector

Limits

  • Linux is the only listed platform
  • Mausezahn and curvetun are experimental
  • Project gives no bug-free guarantee

Who it suits

netsniff-ng suits Linux users doing packet capture, trace analysis, debugging, auditing, or network reconnaissance. It is aimed at command-line workflows and users comfortable with open-source tooling.

Verdict

netsniff-ng provides a broad Linux toolkit for capturing, filtering, analyzing, replaying, and redirecting network traffic. Its command-line focus, protocol coverage, and file compatibility suit technical network work, with experimental components requiring caution.

Where Specifiction places it

Alternatives to netsniff-ngAll alternatives →