🦈 TermShark

WireShark in the terminal. Note that this is a toy project, with a lot of features missing.

📥 Installation

Using binstall

cargo binstall termshark

Downloading from Releases

Navigate to the Releases page and download respective binary for your platform. Make sure to give it execute permissions.

Compiling from Source

Refer to pcap docs for requirements on dependencies.

git clone https://github.com/PRO-2684/termshark.git
cd termshark
cargo build --release
# The binary will be available at ./target/release/termshark

📖 Usage

▶️ Running TUI

sudo ./termshark capture # To capture from default device

Alternatively, you can configure with setcap, if you want to capture without root.

⌨️ Keyboard Control

• ↑/↓ / j/k: Select previous/next packet
• Page Up/Down: Fast scroll (a page at a time)
• Home: Jump to first packet
• End: Jump to last packet
• w/s: Scroll packet details panel up/down
• e/d: Scroll hex dump panel up/down
• q or Ctrl+C: Quit the application
• Enter / Esc: Toggle / clear filters.

🔍 Filter Syntax

key:value key2:value2

See FILTER_SYNTAX.md for detailed documentation.

💡 Demos & Samples

Here's a list of sample packets for testing. All of them are taken from WireShark wiki, so feel free to visit it for more.

• HTTP.pcap: From http.cap
• ICMP.pcap: From ipv4frags.pcap
• IGMP.pcap: From IGMP-dataset.pcap

🎉 Credits

• pcap for interacting with libpcap
• argh for command line argument parsing
• ratatui for TUI