tcpick

TCP stream sniffer and analyzer

TLDR

Capture traffic on interface, host, and port

$ sudo tcpick -i [interface] -C -h [host] -p [port]

Capture HTTP traffic

$ sudo tcpick -i eth0 -C -h [192.168.1.100] -p 80

Display help

$ tcpick --help

tcpick is a packet sniffer and TCP stream analyzer that captures and displays TCP connections and their data. It can monitor network traffic on specific interfaces, hosts, or ports with colorized output.The tool tracks TCP connection states and can reassemble TCP streams to show complete conversations.

PARAMETERS

-i, --interface INTERFACE

Capture on specified network interface

-C, --colors

Display output with colors

-h HOST

Filter by host

-p PORT

Filter by port

-r FILE

Read from pcap file

-w FILE

Write to pcap file

-a

Display data as ASCII

-x

Display data as hexadecimal

INSTALL

sudo apt install tcpick

sudo dnf install tcpick

CAVEATS

Requires root privileges for packet capture. Uses libpcap for capture functionality. Connection tracking may consume memory on busy networks.

HISTORY

tcpick provides network analysts with a focused tool for TCP traffic inspection, combining capture and analysis in a single utility.