# kpcyrd/sniffglue

Secure multithreaded packet sniffer

Repository: https://github.com/kpcyrd/sniffglue
Canonical: https://ross.abutalabs.com/products/sniffglue
Homepage: https://crates.io/crates/sniffglue
Language: Rust
License: GPL-3.0
License Family: copyleft
Topics: rust, sniffer, pcap, network, sandboxed
Last push: 2026-04-19T23:37:17+00:00

## Health v2 (maintenance only)
Score: 72/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 78, release rhythm 48, longevity 100
- inputs: {"age_days": 3277, "days_push": 136, "days_rel": 136, "gap_med": 588, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1265, forks 105 (observed 2026-08-28T04:04:10.927183+00:00)

## What it is
A secure multithreaded network packet sniffer written in Rust that parses packets concurrently across all CPU cores. It is hardened with seccomp sandboxing so it can run safely on untrusted networks without crashing on malformed packets.

## Use cases
- sniff packets on an untrusted wifi network without risking a compromised host
- capture and decode dhcp, dns, tls, and http traffic on an interface
- inspect network traffic from a docker container to debug container networking
- monitor what protocols are flowing through a network interface with readable output
- replace tcpdump with a memory-safe sniffer that won't crash on malformed packets
- increase verbosity to surface arp, ssdp, cjdns, and dropbox beacons on the local network

## When to choose
- you need a hardened, sandboxed sniffer safe to run on hostile networks
- you want readable, filtered packet output by default instead of raw hex dumps
- you prefer a memory-safe Rust alternative to tcpdump
- you need to debug traffic inside containers with a tiny docker image

## When to avoid
- you need full pcap capture-to-file workflows or deep packet inspection
- you need 802.11 wifi frame analysis, which is not yet supported
- you need a GUI like Wireshark for interactive protocol dissection
- you need to write custom dissectors for exotic protocols

## Facets
- artifact type: cli-tool
- maturity: active
- function: networking, security, parser, cli
- domain: security, networking, developer-tools
- platform: cli, rust
- tags: packet-sniffer, pcap, seccomp-sandbox, multithreaded, protocol-analysis, network-monitoring, tcpdump-alternative, command-line, linux, macos, docker

## Member repositories
- kpcyrd/sniffglue (main) score 72

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:10.927183+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:03:52.086132+00:00, confidence not recorded.
  - readme: https://github.com/kpcyrd/sniffglue (fetched 2026-08-28T04:04:10.927183+00:00, sha a533c504154f)
  - registry_crates: https://crates.io/api/v1/crates/sniffglue (fetched 2026-08-29T12:15:50.691656+00:00, sha db8d48fb7018)
- Data as of 2026-08-30T08:39:29.467469+00:00.