iangudger / tcpdump

Pure Go tcpdump clone

Useful if you need a truly statically linked tcpdump-like tool for Linux. For example, this will run on Container-Optimized OS on GKE (Google Kubernetes Engine).

Install:

CGO_ENABLED=0 GOOS=linux go install github.com/iangudger/tcpdump

Run:

$ $(go env GOPATH)/bin/tcpdump -h
~/go/bin/tcpdump [flags]
  -h	Print usage.
  -help
    	Print usage.
  -i string
    	Interface to read packets from. (default "any")
  -len uint
    	Max packet length. (default 65536)
  -out string
    	Path to output file in pcap format. (Default is a randomly generated directory in /tmp)
$ sudo $(go env GOPATH)/bin/tcpdump
2024/02/05 09:48:45 Saving capture to: /tmp/3966175455/dump.pcap
2024/02/05 09:48:45 Capturing from all interfaces