Which pcap (tcpdump) library to use?

Ruby
1

Hi,

It seems that the pcap library has not been recently maintained, and so
I was wondering if anyone has advice on which of the following to use:

rubypcap: Ruby/Pcap download | SourceForge.net
ruby-pcap: GitHub - ahobson/ruby-pcap: Ruby interface to LBL Packet Capture library.
pcaprub (I): File: README — Documentation for pcaprub (0.11.0)
pcaprub (II):
http://metasploit.com/svn/framework3/trunk/external/pcaprub/

I appreciate any advice you can offer!

Best,

  • Andrew
2

Andrew S. wrote in post #1035474:

Hi,

It seems that the pcap library has not been recently maintained, and so
I was wondering if anyone has advice on which of the following to use:

rubypcap: Ruby/Pcap download | SourceForge.net
ruby-pcap: GitHub - ahobson/ruby-pcap: Ruby interface to LBL Packet Capture library.
pcaprub (I): File: README — Documentation for pcaprub (0.11.0)
pcaprub (II):
http://metasploit.com/svn/framework3/trunk/external/pcaprub/

I appreciate any advice you can offer!

Best,

  • Andrew

I’d go for either two of the pcaprub gems imo.
Also check out packetfu.

Hope that helps.