https://github.com/winking324/ntar

NTAR: Network Trace Archival and Retrieval library
https://github.com/winking324/ntar

network ntar pcapng wireshark

Last synced: about 1 month ago
JSON representation

NTAR: Network Trace Archival and Retrieval library

• Host: GitHub
• URL: https://github.com/winking324/ntar
• Owner: winking324
• License: other
• Created: 2022-11-17T05:56:15.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2022-11-23T02:21:21.000Z (about 2 years ago)
• Last Synced: 2024-11-06T19:51:14.927Z (3 months ago)
• Topics: network, ntar, pcapng, wireshark
• Language: C
• Homepage: https://www.winpcap.org/ntar/default.htm
• Size: 243 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG
  • License: license.txt

Awesome Lists containing this project

README

        
# NTAR: Network Trace Archival and Retrieval library

Welcome to the NTAR website, the Network Trace Archival and Retrieval library. The main objective of NTAR is to provide an extensible way to store and retrieve network traces to mass storage. The NTAR file format includes support for saving a number of per-capture and per-packet details ("metadata") in a simple and yet powerful manner.

NTAR implements a new "wanna-be" dump standard that overcomes the limits of the current [libpcap](http://www.tcpdump.org/)/[WinPcap](http://www.winpcap.org/) dump format, by allowing the user to save packets coming from multiple interfaces and different data-links in a single trace file. More information on this new trace format can be found in [PCAP Next Generation Dump File Format](https://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html).

NTAR is a fresh project looking for contributors. If you want to be among them, you can join the **[email protected]** mailing list. At the moment, NTAR is available in source code format only, from the [download page](https://www.winpcap.org/ntar/download/default.htm). In the future, we plan to set up a public CVS repository.

For read-only use, you can refer to [ntar-reader](https://github.com/winking324/ntar-reader).