nChronos vs netsniff-ng

nChronos is Colasoft’s application-focused network performance analysis system for medium and large corporate networks. Its client/server design places continuous packet capture, analysis, storage and data mining on a server, while a console displays and analyzes the collected data. The server can receive traffic through a network mirror port or link tap and retain packets for later investigation of network or application problems. Real-time statistics and user-defined alerts show network events as they occur. System or custom reports can be scheduled for hourly, daily, weekly or monthly email delivery. Users can define application and transaction monitoring, with profiles for HTTP, FTP, email and DNS. Packet files can be replayed from Colasoft, libpcap and several vendor formats, including files associated with Wireshark, Ethereal and Tcpdump. Linux server systems and Windows consoles are listed, with browser-based server configuration. Standard specifications allow four logical links, eight capture interfaces and two concurrent server connections.

netsniff-ng is a free Linux network analyzer and toolkit for network development, debugging, analysis, auditing, and reconnaissance. It captures, analyzes, replays, and redirects traffic using zero-copy packet mechanisms, with live capture, command-line operation, display filters, and offline trace analysis. Supported capture files include tcpdump-capable pcap, a nanosecond-resolution tcpdump-capable variant, Alexey Kuznetzov's pcap, and netsniff-ng pcap. Low- and high-level filtering include Berkeley Packet Filter expressions. The toolkit combines netsniff-ng, trafgen, mausezahn, ifpps, curvetun, astraceroute, flowtop, and bpfc. Its dissector covers Ethernet, WLAN, ARP, MPLS, VLAN, LLDP, IPv4, IPv6, ICMP, IGMP, TCP, and UDP. Mausezahn and curvetun are experimental and not advised for production. The toolkit is GPL 2.0 open source. Release checks use Git tags and GPG signatures; support is through a mailing list and online FAQ.