netsniff-ng

Choose the component before the workflow. netsniff-ng captures or analyzes PCAP and can replay it, trafgen generates traffic, ifpps reads kernel interface statistics, and flowtop presents kernel connection tracking. For capture, the maintainer manual documents interface or PCAP input, BPF filtering and rotation by file size or time. A saved PCAP can also become a trafgen configuration. The packet analyzer is Linux-specific and does not perform stream reassembly, so choose another analysis path when that is essential. Capturing visible packets and actively replaying them are different operations; keep replay and generation within the authorized test environment. The suite is free GPLv2 software.