Name: ngrep-1.45-1.rh9.rf.i386.rpm
Description: ngrep
Version: 1.45-1
Size: 41.2 KB  (42142 bytes)
MD5 Sum: 07457e3e14a690332d0dbb0acf824a6c
Packager : Dag Wieers <dag (at) wieers.com>
Packager Website: DAG
Obtained On: 2007-06-26
Obtained From:
Download URL:
Requirements:

/usr/bin/perl
libc.so.6
libc.so.6(GLIBC_2.0)
libc.so.6(GLIBC_2.1)
libc.so.6(GLIBC_2.3)
libpcap.so.0.6.2
perl >= 0:5.004
perl(POSIX)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1

Purchase Information: Free
License: GPL
Redistributable: Yes
Comments: ngrep strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes TCP, UDP and ICMP across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands bpf filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

RPM Info:

Name        : ngrep                        Relocations: (not relocateable)
Version     : 1.45                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Release     : 1.rh9.rf                      Build Date: Sun 10 Dec 2006 09:15:56 AM EST
Install Date: (not installed)               Build Host: lisse.leuven.wieers.com
Group       : Applications/Internet         Source RPM: ngrep-1.45-1.rh9.rf.src.rpm
Size        : 82720                            License: GPL
Signature   : DSA/SHA1, Sun 10 Dec 2006 09:33:57 AM EST, Key ID a20e52146b8d79e6
Packager    : Dag Wieers <dag@wieers.com>
URL         : http://ngrep.sourceforge.net/
Summary     : Realtime network grep tool
Description :
ngrep is grep command that works on realtime network data.

ngrep strives to provide most of GNU grep's common features, applying
them to the network layer. ngrep is a pcap-aware tool that will allow
you to specify extended regular or hexadecimal expressions to match
against data payloads of packets. It currently recognizes TCP, UDP
and ICMP across Ethernet, PPP, SLIP, FDDI, Token Ring and null
interfaces, and understands bpf filter logic in the same fashion as
more common packet sniffing tools, such as tcpdump and snoop.

Notes:

Run as root.

References:

  1. Network monitoring with ngrep
    By: Mayank Sharm
    July 19, 2005
    NewsForge - The Online Newspaper for Linux and Open Source
  2. The underrated ngrep tool
    June 8, 2007
    lxpages.com blog