Wireshark has a sibling... (Stratoshark for the cloud!)

[@alaudet]

Very cool, looking into exploring this further. So nice to have this with the comfortable Wireshark interface. Have dumped a few sysdig captures to scap and been going through them with Stratoshark. A lot to unpack here. Something tells me your channel will be a goto for getting people familiar with this tool, like your Wireshark Masterclass series.

[@jjann54321]

Released for Linux first?!?! I knew this day would finally come. Thank you Chris for hosting Gerald and bringing this tool to our attention! Chris, might I recommend adding the word "Stratoshark" to the video title? That would certainly make this video easier to find for specific searches and possibly get a boost from the YT algorithm as it has a tendency to promote brand/product names.

[@ChrisGreer]

@@jjann54321 great feedback and thank you!!

[@jjann54321]

@@ChrisGreer My pleasure, and truly thank you for all you do for the Packet Head Community!

Man, amazing tool! How come nobody came up with this before?

[@WireSharkFest]

Awesome video Chris!

[@miguelangelfoggia3830]

Very sweet! Awesome bringing the Wireshark creator into the channel to be with the packet people :)

[@Vassilis_Karatzas]

Thanks both of you, nice application for analyzing and understanding what is going on under the "hood"!

[@ChrisGreer]

Agreed!

[@anythinggoes1206]

wow, thats amazing, thx both

[@FJB_KJV]

Kool...I was clearing out some old IT books cus I'm getting ready to down size...Tossed out one of my best Gerald Combs books and am really made at myself! It is on the old tech I grew up with. Thanks for the info, will check it out!

[@lourosa9346]

cool stuff for sure. Also love your work Chris. It's helped me a lot with those advance troubleshooting and has bailed out many of my customer. As for the hex dump. I just started messing with it and recently had to create a custom signature based on a dns query. The way the regex worked, the only option was the hex dump. So I'm all for it

[@majiddehbi9186]

thx chris it a good new for an old guy like me i have use wieshark for years thx for this new hope to use it very soon

[@williamedmuntyote183]

wireshark just got a malware hunting companion! and Hexdumps make me feel like taking a dive into a hay stack 😂

[@ChrisGreer]

@@williamedmuntyote183 I’m working to get some samples for you all to tinker with. Malware analysis is one of the more exciting use cases!

[@jstrunck]

Thanks Chris!!

[@KingFaulcon]

Hex dump is the only english i see in wireshark lol Great work!!!

[@RoyalReptilePirates]

You guys need to redesign the icon for Stratoshark to be a part of a body of a shark so we can have a shark on our desktop when more family members come along

[@Tech3490-os1jg]

Would this be kind of like sysinternals? That would be awesome if it works together with wireshark!

[@dronacharya6527]

Yeah It seems like procmon for windows .

[@peterwassmuth4014]

Awesome! Thank you for Sharing! 💯✴

[@ChrisGreer]

Thanks for watching!

[@DAVE-GM]

That's great! Many thanks.

[@ChrisGreer]

You are welcome!

[@cybersecuritydeclassified4793]

Wow! Now imagine an NDR built into this aggregating across an investigation!

[@convictednotconvinced]

Heck yeah, I've been asking Santa for something like this for a long time.

Sounds good. Chris I hope that the Stratoshark is going to be your next challenge and you will provide another wonderful video tutorials. However you might think about new nick name as Packet Head might not be relevant :-). Well done Gerald and your Team!

[@ChrisGreer]

I know right? What will syscall head doesn’t have the same ring. Yes planning on more stratoshark content

@@ChrisGreer Thank you and I am looking forward.

[@shadowj5639]

Does this show the user or auth associated with a process or call or event? Something to correlate the owner of such things would be nice...

[@ChrisGreer]

Yes it can - I am looking for some good capture examples to be able to share with you guys.

[@cybersecuritydeclassified4793]

I have to ask about the name "Falco" in relation to plugins. hehe

[@Leomor-s5t]

waiting for kali linux new update package 😊

[@krishnaSagar69]

So as per my understanding this can get info from the daemons in the OS. The raw logs from those processes. Which is really deep and cool but I think we need privileged credentials to run this.

[@unboxing44]

Hello dear Can we capture whatsspa calls with wireshark

[@CraigMullins1]

:)

[@khelouiazzeddine3113]

Wodeful tools