Which pcap (tcpdump) library to use?

Hi,

It seems that the pcap library has not been recently maintained, and so
I was wondering if anyone has advice on which of the following to use:

rubypcap: http://sourceforge.net/apps/trac/rubypcap/
ruby-pcap: https://github.com/ahobson/ruby-pcap
pcaprub (I): http://rubydoc.info/gems/pcaprub/0.11.0/frames
pcaprub (II):
http://metasploit.com/svn/framework3/trunk/external/pcaprub/

I appreciate any advice you can offer!

Best,

  • Andrew

Andrew S. wrote in post #1035474:

Hi,

It seems that the pcap library has not been recently maintained, and so
I was wondering if anyone has advice on which of the following to use:

rubypcap: http://sourceforge.net/apps/trac/rubypcap/
ruby-pcap: https://github.com/ahobson/ruby-pcap
pcaprub (I): http://rubydoc.info/gems/pcaprub/0.11.0/frames
pcaprub (II):
http://metasploit.com/svn/framework3/trunk/external/pcaprub/

I appreciate any advice you can offer!

Best,

  • Andrew

I’d go for either two of the pcaprub gems imo.
Also check out packetfu.

Hope that helps.

This forum is not affiliated to the Ruby language, Ruby on Rails framework, nor any Ruby applications discussed here.

| Privacy Policy | Terms of Service | Remote Ruby Jobs