impacket-sniffer

Capture and analyze network traffic

$ sudo impacket-sniffer [eth0]

$ sudo impacket-sniffer -filter '[host 192.168.1.100]' [eth0]

impacket-sniffer [-h] [-filter FILTER] interface

impacket-sniffer is a network packet sniffer built on Impacket's protocol parsing libraries. Similar to impacket-sniff, it captures and displays network traffic but may provide different output formatting or protocol decoding.
This tool leverages Impacket's extensive protocol implementations to parse and display captured packets in a readable format, useful for network analysis during security assessments.

-filter FILTER

BPF filter expression to limit captured packets

Requires root/administrator privileges for raw socket access. For comprehensive packet analysis, dedicated tools like Wireshark or tcpdump are more appropriate. May not capture all packet types depending on interface configuration.

Part of the Impacket library by SecureAuth. Demonstrates Impacket's capabilities for network traffic capture and protocol analysis in Python.

tcpdump(1), wireshark(1), impacket-sniff(1), ngrep(1)