For network admins and network security professionals, one of the most important tools to learn to use is Wireshark (formerly Ethereal), a free and open source network analyzer/packet sniffer ...

Now that we have some packets, let's break out Wireshark for analysis. sudo apt install wireshark Open the .pcap file with Wireshark. sudo wireshark linuxjournal.pcap Filter the traffic for TCP only.

What Wireshark does for network packet analysis, Stratoshark wants to do for system calls and logs. The iX editorial team spoke to the makers of the tool.