Skip to content
SPECIFICTION
Get listed

tcpdump

tcpdump.org

Free plan WindowsmacOSLinux
Visit tcpdump.org
Spec score 7.4 #11 of 18 in Network Troubleshooting Software

What it is

tcpdump is a network monitoring and data acquisition tool that captures traffic through libpcap, an interface for user-level packet capture. It provides command-line tools and PCAP support, and the project lists systems including AIX, BSD variants, GNU/Linux, macOS, Solaris, QNX, and Windows. It is free, with source code available through a public Git repository and native packages or ports on many systems.

Building requires libpcap and a C99-compliant compiler. Windows builds also require WinPcap or Npcap and Visual Studio with CMake. The license permits redistribution and use in source and binary forms under its conditions. Capture permissions depend on the operating system and its configuration; the project cautions that permitted users may capture network traffic, including passwords. Native packages may lag a few versions, while a newer snapshot can be compiled from source. The project lists Linux, macOS, and Windows among its platforms.

Spec sheet

Purpose
tcpdump is a tool for network monitoring and data acquisition.Read 3 Oct 2026 · github.com
Intended users
The README describes tcpdump as a tool for network monitoring and data acquisition, and notes its origin in research on TCP and Internet gateway performance.Read 3 Oct 2026 · github.com
License
The project license permits redistribution and use in source and binary forms subject to its listed conditions.Read 3 Oct 2026 · github.com
Build requirement
Building tcpdump requires libpcap and a C99-compliant compiler.Read 3 Oct 2026 · github.com
Capture library
tcpdump uses libpcap, a system-independent interface for user-level packet capture.Read 3 Oct 2026 · github.com
Capture permissions
The installation notes say whether a user can capture traffic depends on the operating system and its configuration.Read 3 Oct 2026 · github.com
Distribution
The project provides source code through its public Git repository and describes native operating system packages or ports as available on many systems.Read 3 Oct 2026 · github.com
Package versions
The project notes that native packages are sometimes a few versions behind and that a newer snapshot can be compiled from source.Read 3 Oct 2026 · github.com
Security consideration
The installation notes caution that users able to capture traffic may capture network traffic including passwords.Read 3 Oct 2026 · github.com
Security reporting
The project asks users to report security issues by email to [email protected].Read 3 Oct 2026 · github.com
Support and contributions
The project directs users to its source tree contribution guidelines for bugs, patches, feature requests, and general feedback.Read 3 Oct 2026 · github.com
Supported systems
The project lists AIX, several BSD systems, GNU/Linux, macOS, Solaris, QNX, and Windows among platforms on which tcpdump compiles and works.Read 3 Oct 2026 · github.com
Windows requirement
The project says Windows builds require WinPcap or Npcap and Visual Studio with CMake.Read 3 Oct 2026 · github.com

Plans and prices

tcpdump Free BSD-licensed software · capture permission depends on operating system and configuration Read 3 Oct 2026 · github.com

Every tcpdump plan and price →

Strong points and limits

Strong points

  • Free, BSD-licensed software.
  • Uses libpcap for packet capture.
  • Source code and native packages are available.
  • Supports PCAP and command-line tools.

Limits

  • Capture permission depends on system and configuration.
  • Windows builds require additional tools.
  • Native packages may lag a few versions.
  • Capture access may expose traffic including passwords.

Who it suits

tcpdump suits users who need a command-line tool for network monitoring and packet capture. Building from source requires libpcap and a C99-compliant compiler.

Verdict

tcpdump offers a free, source-available way to monitor and acquire network traffic across many systems. Check capture permissions and the security implications before enabling packet capture.

Where Specifiction places it

Alternatives to tcpdumpAll alternatives →