Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Deep Linux runtime visibility meets Wireshark
| Date | Stars |
|---|---|
| 2026-07-24 | 311 |
| 2026-07-25 | 311 |
| 2026-07-28 | 311 |
| 2026-07-30 | 311 |
| 2026-08-06 | 311 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
  1. [What is Traceeshark?](#what-is-traceeshark) 2. [Getting started](#getting-started) 3. [Basic usage](#basic-usage) 4. [Build from source](#build-from-source) ## What is Traceeshark? Traceeshark brings the world of Linux runtime security monitoring and advanced system tracing to the familiar and ubiquitous network analysis tool Wireshark. Using Traceeshark, you can load [Tracee](https://github.com/aquasecurity/tracee) captures in JSON format into Wireshark, and analyze them using Wireshark's advanced display and filtering capabilities.  Traceeshark also provides the ability to analyze system events side by side with network packets generated by Tracee that contain rich context about the system process and container they belong to. Another feature of Traceeshark is the ability to capture events using Tracee directly from Wireshark and have them stream in like a network capture. This can be done either locally on a Linux machine running Wireshark, semi-locally using docker desktop’s VM on Windows and Mac, or even remotely over SSH. For an overview of Traceeshark and an example of how it can be used for malware analysis, you can read [Go deeper: Linux runtime visibility meets Wireshark](https://www.aquasec.com/blog/go-deeper-linux-runtime-visibility-meets-wireshark/). ## Getting started The simplest way to install Traceeshark is using the autoinstall script. First, make sure you have Python 3 installed, and your Wireshark installation is updated to the latest version. Then, simply run the following command: **Windows (powershell)** ```powershell $outFile = [System.IO.Path]::GetTempFileName() ; Invoke-WebRequest -Uri "https://raw.githubusercontent.com/aquasecurity/traceeshark/main/autoinstall.py" -OutFile $outFile ; python.exe $outFile ; rm $outFile ``` **Linux/Mac** ```bash outfile=$(mktemp) && curl -s "https://raw.githubusercontent.com/aquasecurity/traceeshark/main/autoinstall.py" > $outfile && python3 $outfile && rm $outfile ``` :information_source: Note that Traceeshark is compiled for a specific Wireshark verison. If you are using a Linux distribution with an outdated Wireshark package, the prebuilt releases of Traceeshark may not work. Ubuntu 22.04 and 24.04 have a dedicated release for their Wireshark package version. ### Setup for live capture To use live capture, Python 3 must be installed and in your PATH, and a few libraries must be installed: ``` pip3 install paramiko msgpack python-pcapng ``` Additionally, the user must be able to run docker containers. :information_source: This requirement is also applicable to remote servers you want to capture on, make sure the user you log in with can run docker. On Linux, add your user to the docker group: ```bash sudo usermod -aG docker <user> ``` On Windows and Mac, make sure docker desktop is installed and your user can run containers. :warning: Do not run Wireshark as root instead of adding your user the the docker group. Running Wireshark as root is strongly discouraged, and Wireshark prevents binary plugins from loading when running as root. ### Manual installation Traceeshark can be installed using a [release](https://github.com/aquasecurity/traceeshark/releases/latest) archive containing the plugins and other required files. Each release archive targets a specific Wireshark version and may not work with other versions. Download the appropriate release, unzip it, and run the installation script from the command line (`install.ps1` on Windows and `install.sh` on Linux/Mac) :warning: Make sure you're in the same directory as the installation script when running it Now the plugins should be available to your Wireshark installation. ### Verifying that the plugins were loaded To make sure that the plugins were loaded, in Wireshar
Excerpt of 6,074 characters
Read on GitHubWould you bet a product on this? Bounded 0–100 and slow moving.
matched fp:fded9b8125fac32f, topic:tracing