jpr5/ngrep

ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

986
COther
greppingsniffer
Stars

986

Updated

Nov 24, 2025

Stars Over Time

Top Contributors

Related Repositories

Track developers from jpr5/ngrep

Join 1,000+ companies finding quality developer leads