This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

termshark

Free#11 of 30 in Network Protocol AnalyzersNetwork Packet Analyzer Software

termshark: A focused terminal analyzer for interactive PCAP and live traffic inspection. Ranked #11 of 30 in Network Protocol Analyzers by our editors (8.1/10); pricing: Open source; best for interactive terminal packet inspection.

8.1/10Editor score

Visit termshark

termshark8.1 Visit termshark

At a glance

Editor score
8.1 / 10
Pricing
Open source
Best for
Interactive terminal packet inspection
Paid from
Free
Deployment
Both
Facts checked
20 Sep 2026

Where it wins
- Reads PCAP files and captures live traffic from interfaces
- Supports Wireshark capture and display filters
- Reassembles TCP and UDP streams with conversation views
Where it doesn't
- Depends on tshark for packet-analysis functionality
- Uses a terminal interface rather than a graphical workspace
- Advanced packet analysis requires familiarity with filters and tshark

Our verdict on termshark

termshark is an open-source, terminal-based interface for tshark and Wireshark-style packet analysis. It is suited to network engineers, incident responders, and developers who want interactive inspection of PCAP files or live traffic from interfaces. The application displays packet lists, protocol structures, hexadecimal data, network conversations, and reassembled TCP or UDP streams. It runs from the command line across Windows, macOS, Linux, and Android through Termux, with deployment for both local and remote environments.

Its strongest fit is an interactive workflow built around established packet-analysis concepts. Users can apply Wireshark capture and display filters, search packet lists, structures, bytes, and display-filter results, and copy packet-data ranges from the terminal. Stream reassembly and conversation views add flow-level context, while command-line and tshark pass-through operation support workflows that move between direct commands and the interface. Integration with tshark and Wireshark makes it a focused front end for users already working with that ecosystem.

The trade-off is its terminal-first design and dependency on tshark for packet-analysis functionality. That makes termshark a practical choice for command-line troubleshooting, local or remote inspection, and users who prefer text-based tools. It is less suitable for teams seeking a graphical packet-analysis workspace or a product centered on a broader visual monitoring experience. Buyers should choose termshark when PCAP handling, live capture, filtering, stream inspection, and terminal operation are the priority; those wanting a graphical interface should consider an alternative.

Your product? Our editors can test termshark in depth and publish a review, labelled as paid · from $149/mo →

termshark pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.

See plans on github.com

termshark fact sheet

Free plan	Not verified
Paid from	Free
Deployment	Both
Capture sources	Both
PCAP support	Yes
Traffic decryption	Not verified
CLI tools	Yes
Remote capture	Yes
Flow analysis	Yes
Deployment	Desktop, Self-hosted
Platforms	Windows, macOS, Linux, Android
Support	Community, Docs
Built for	Solo, Small business, Mid-market, Enterprise (editorial estimate)
Integrations	2 integrations: tshark, Wireshark
Pricing	Open source
Website	github.com
Facts checked	20 Sep 2026

termshark integrations

termshark lists 2 integrations on its own site.

tshark
Wireshark

Alternatives to termshark

See all termshark alternatives →

Also Ranked In

termshark is ranked in 2 of our directories.

#12Network Packet Analyzer Software32 tools ranked

Used termshark? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used termshark for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used termshark myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

termshark is listed in our Network Protocol Analyzers directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/termshark/"><img src="https://www.itechguides.com/best/badge/termshark.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update