nChronos vs Termshark
nChronos
colasoft.comTermshark
termshark.ioSide by side
| Figure | nChronos | Termshark |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| Android | — | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 1 |
| Spec score · Network Packet Capture Software | 7.4 (#12) | 8.0 (#7) |
| Purpose | nChronos is an application-centric network performance analysis system combining a server and console for continuous packet capture, storage, data mining and traffic analysis. | Termshark is a terminal user interface for tshark, inspired by Wireshark. |
| Support | The maker provides an online support form and says a Colasoft representative responds to quote requests within one business day. | The homepage directs users to GitHub for setup, bugs, and feature requests. |
Plans
In their own words
nChronos
nChronos is Colasoft’s application-focused network performance analysis system for medium and large corporate networks. Its client/server design places continuous packet capture, analysis, storage and data mining on a server, while a console displays and analyzes the collected data. The server can receive traffic through a network mirror port or link tap and retain packets for later investigation of network or application problems. Real-time statistics and user-defined alerts show network events as they occur. System or custom reports can be scheduled for hourly, daily, weekly or monthly email delivery. Users can define application and transaction monitoring, with profiles for HTTP, FTP, email and DNS. Packet files can be replayed from Colasoft, libpcap and several vendor formats, including files associated with Wireshark, Ethereal and Tcpdump. Linux server systems and Windows consoles are listed, with browser-based server configuration. Standard specifications allow four logical links, eight capture interfaces and two concurrent server connections.
Termshark
Termshark is a terminal interface for tshark, inspired by Wireshark, for inspecting saved packet captures and live network traffic. It can read pcap files and sniff live interfaces when tshark permits, then apply Wireshark display filters to either. Users can inspect and reassemble TCP and UDP flows, search packets, copy packet ranges, and view conversations involving Ethernet, IPv4, IPv6, UDP, and TCP. Version 2.4 added packet search and profiles for colors and columns. It supports 16-color, 256-color, and truecolor terminal modes. The project lists Linux, macOS, BSD variants, Android through Termux, and Windows, with precompiled executables available through GitHub releases. Termshark is aimed at remote debugging where a large capture can be examined on the remote machine rather than copied to a desktop. It is free and MIT licensed. Packet analysis requires tshark 1.10.2 or newer in PATH; the project notes that tshark has features Termshark does not expose.