KSnuffle 2.2 - A KDE network sniffer

KSnuffle is a network packet sniffer for KDE. It currently builds against against a recent KDE2.1 CVS snapshot (but should build against KDE2.0 or KDE2.0.1 with QT-2.2.2 or later).

Features include:

The KSnuffle 2.2 manual pages are online here.

Change Log

Below are some screenshots of the various screens Click on a shot for a full-size picture with some comments.

Main configuration page
  • Select interface
  • Set logging options
  • Configure packet details display
  • Configure graphic load display
Filter/Event trigger configuration
  • Set main packet filter
  • Start and/or stop display on events
  • One shot and repeated display
  • Display until or display from event
Event commands
  • Execute commands on specified events
  • Event details substitued into command
Graphic load display
  • Network data load histogram
  • Network packet count histogram
  • Time-averaged load display
Packet details display
Parallel load display
  • Side-by-side load histograms
  • Select display order
Global setup
  • IP address decoding
  • Port to service mapping
  • Packet display load threshholds
Support for non-root users
  • Allow non-root users
  • Restrict visibility of application data
  • Per-user packet pre-filter
View protocol structure
  • View protocol structure
  • View packet data byte-by-byte
  • Move to first/previous/next/last TCP/IP packet
View TCP/IP data streams
  • View stream state
  • View stream open, close and last data times
  • View stream data counts
View data in TCP/IP stream
  • View all data in TCP/IP stream
  • View individual packets

 

KSnuffle is available as:
Source, V2.2 (1.2M)
Source, V0.7 (KDE1.1/Qt1.44) (924K)

KSnuffle RPMs for Caldera EDesktop 2.4 are available as:
Binary (850K)
Source (1.3M)
Thanks to Jens Mueller (jm30@mail.inf.tu-dresden.de) for making these available.

mike@quaking.demon.co.uk