Termshark

Termshark is ranked #5 of 20 in network packet capture software on The Geeks Club. It runs on Android, Linux, macOS, Windows. There is a free plan.

Termshark plans and pricing

Termshark Free Requires tshark in PATH · tshark v1.10.2 or newer · Some tshark features are not exposed github.com · 30 Sept 2026

Termshark

Purpose: Termshark is a terminal user interface for tshark, inspired by Wireshark.
Use case: The project describes using Termshark to inspect a large pcap on a remote machine without copying it to a desktop.
Capture and files: Termshark can read pcap files and sniff live interfaces when tshark is permitted.
Filters: It filters pcaps and live captures using Wireshark display filters.
Stream analysis: It can reassemble and inspect TCP and UDP flows.
Conversations: Its conversation view currently supports Ethernet, IPv4, IPv6, UDP, and TCP.
Packet search: The project homepage lists packet search among the features introduced in version 2.4.
Profiles: The homepage says version 2.4 includes profiles for colors and columns.
Runtime dependency: Termshark requires tshark version 1.10.2 or higher in the PATH for packet analysis.
Platform support: The project lists downloads for Linux, macOS, BSD variants, Android through Termux, and Windows.
Downloads: Precompiled executables are available through the project's GitHub releases.
Support: The homepage directs users to GitHub for setup, bugs, and feature requests.
License: The GitHub repository identifies the project as MIT licensed.
Limit: The project notes that tshark has more features than Termshark currently exposes.
Price from: Free

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.