kpcyrd/sniffglue

Health v2 · maintenance only

Adoption not part of the score

1265 stars · 105 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A secure multithreaded network packet sniffer written in Rust that parses packets concurrently across all CPU cores. It is hardened with seccomp sandboxing so it can run safely on untrusted networks without crashing on malformed packets.

Use cases

• sniff packets on an untrusted wifi network without risking a compromised host
• capture and decode dhcp, dns, tls, and http traffic on an interface
• inspect network traffic from a docker container to debug container networking
• monitor what protocols are flowing through a network interface with readable output
• replace tcpdump with a memory-safe sniffer that won't crash on malformed packets
• increase verbosity to surface arp, ssdp, cjdns, and dropbox beacons on the local network

When to choose

• you need a hardened, sandboxed sniffer safe to run on hostile networks
• you want readable, filtered packet output by default instead of raw hex dumps
• you prefer a memory-safe Rust alternative to tcpdump
• you need to debug traffic inside containers with a tiny docker image

When to avoid

• you need full pcap capture-to-file workflows or deep packet inspection
• you need 802.11 wifi frame analysis, which is not yet supported
• you need a GUI like Wireshark for interactive protocol dissection
• you need to write custom dissectors for exotic protocols

Facets

cli-tool · maturity active

networking security parser cli security networking developer-tools cli rust packet-sniffer pcap seccomp-sandbox multithreaded protocol-analysis network-monitoring tcpdump-alternative command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="kpcyrd/sniffglue")