BabyShark

BabyShark is a text-based GUI network monitoring and debug tool. It is designed
to be used on embedded linux systems where a display manager is not supported
or X11 forwarding is too much of a pain or insecure. It fills the gap between
a full featured WireShark and an overly complicated command line tool like TShark
or TCPDump.

The primary goal of BabyShark is to monitor specific packet "streams" (same source, destination MAC, IP, and UDP port, VLAN, and PCP value).

BabyShark supports the following features:

• VLAN-tagged Ethernet frame monitoring
• IPv4 monitoring
• Raw packet hex view
• ARP monitoring
• Supports both wired and wireless (WiFi) Ethernet
• Supports bluetooth monitoring
• Test packet generation / transmittal
• Packet definitions stored in XML file
• NCurses colorization
• Per-stream data and wired bandwidth statistics.

Building from source

The following prerequites must be installed:

• cmake
• g++
• libc6-dev
• libpcap-dev (>=1.0)
• libncurses-dev (>=6.0)

Run the build_all.sh script to build both the debug and release versions as well as the .deb installer.

Building with unit tests

The following additional prerequisites must be installed to build the unit tests:

• govr
• lcov

From the root of the cloned directory, initialize and update the googletest-src git submodule:

git submodule update --init

Create and change to the debug build directory and initialize CMake build type as tests:

mkdir -p build/debug
cd build/debug

cmake -DCMAKE_BUILD_TYPE=tests ../..
make

The unit test executable is located here:

./parsers/parser_tests