Ngrep is a software tool that enables network packet analysis through filtering, searching, and pattern matching capabilities similar to the Unix grep utility.
Ngrep is a powerful network layer tool that's designed to deliver most of GNU grep's popular functionalities. This software allows users to use extended regular or hexadecimal expressions to match the data payloads of packets. Ngrep is also a pcap-aware application that recognizes various protocols, including TCP, UDP, ICMP, IGMP, and Raw, across Ethernet, PPP, SLIP, FDDI, Token Ring, 802.11, and null interfaces.
One of the most impressive features of Ngrep is its understanding of bpf filter logic, meaning that it works in a similar way to more common packet sniffing tools, like tcpdump and snoop. This makes the process of debugging and analyzing network issues a lot easier and more efficient.
This latest release of Ngrep comes with several new improvements and bug fixes. Firstly, it fixes an under-sized snaplen bug that resulted in garbage input to the pattern matcher. Secondly, it resolves a bug in the IPv6/TCP packet length calculation and a double-free race condition during ngrep termination.
Additionally, this release improves packet length calculation in the main processing loop, resulting in a performance boost. The build system logic has also been simplified, and "-s 0'' has been changed to match tcpdump behavior. Finally, Ngrep has added support for IEEE802_11_RADIO (radiotap), making it an even more capable tool for those who need to analyze wireless networks. Overall, Ngrep is an effective solution for network troubleshooting and analysis.
One of the most impressive features of Ngrep is its understanding of bpf filter logic, meaning that it works in a similar way to more common packet sniffing tools, like tcpdump and snoop. This makes the process of debugging and analyzing network issues a lot easier and more efficient.
This latest release of Ngrep comes with several new improvements and bug fixes. Firstly, it fixes an under-sized snaplen bug that resulted in garbage input to the pattern matcher. Secondly, it resolves a bug in the IPv6/TCP packet length calculation and a double-free race condition during ngrep termination.
Additionally, this release improves packet length calculation in the main processing loop, resulting in a performance boost. The build system logic has also been simplified, and "-s 0'' has been changed to match tcpdump behavior. Finally, Ngrep has added support for IEEE802_11_RADIO (radiotap), making it an even more capable tool for those who need to analyze wireless networks. Overall, Ngrep is an effective solution for network troubleshooting and analysis.
What's New
Version 1.45: N/A