# jpr5/ngrep

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/jpr5-ngrep).**

1,014 stars · 105 forks · C · NOASSERTION

## Links

- GitHub: https://github.com/jpr5/ngrep
- Homepage: https://github.com/jpr5/ngrep
- awesome-repositories: https://awesome-repositories.com/repository/jpr5-ngrep.md

## Topics

`grepping` `sniffer`

## Description

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

## Tags

### Part of an Awesome List

- [Command Line Tools](https://awesome-repositories.com/f/awesome-lists/devtools/command-line-tools.md) — Listed in the “Command Line Tools” section of the The Book Of Secret Knowledge awesome list.
- [Traffic Capture Frameworks](https://awesome-repositories.com/f/awesome-lists/devtools/traffic-capture-frameworks.md) — Grep-like pattern matching applied to network layer traffic.
- [Network Analysis](https://awesome-repositories.com/f/awesome-lists/security/network-analysis.md) — Searches network traffic using grep-like syntax.