nChronos vs TShark

nChronos is Colasoft’s application-focused network performance analysis system for medium and large corporate networks. Its client/server design places continuous packet capture, analysis, storage and data mining on a server, while a console displays and analyzes the collected data. The server can receive traffic through a network mirror port or link tap and retain packets for later investigation of network or application problems. Real-time statistics and user-defined alerts show network events as they occur. System or custom reports can be scheduled for hourly, daily, weekly or monthly email delivery. Users can define application and transaction monitoring, with profiles for HTTP, FTP, email and DNS. Packet files can be replayed from Colasoft, libpcap and several vendor formats, including files associated with Wireshark, Ethereal and Tcpdump. Linux server systems and Windows consoles are listed, with browser-based server configuration. Standard specifications allow four logical links, eight capture interfaces and two concurrent server connections.

TShark is the Wireshark project's terminal-mode utility for capturing and analyzing network traffic. It can capture live packets or read saved captures, decode packet data for output, and write captures to a file. Its native capture format is pcapng, and it can read and write formats supported by Wireshark. Display filters use Wireshark syntax to select packets and protocol fields. Output formats include fields, JSON, PDML, and text; capture controls include interface selection, capture filters, packet limits, and ring-buffer files. TShark can write ElasticSearch mapping data or pipe packet output to another program or script. One constraint is that display filters are unavailable when capturing and saving packets with the -w option. The manual sets a 2 TB maximum capture-file size and notes potential issues above 2^32 packets. The Wireshark project is maintained by the Wireshark Foundation, a nonprofit supported by donations. TShark is free under GNU GPL version 2 and runs on Linux, macOS, and Windows.