For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

Termshark

Android only

8.2No. 1 of 20
in Network Packet Capture Software
  • Recognised40% of the score30
  • Phone app26% of the score100
  • Documented20% of the score100
  • Free plan14% of the score100
Free plan
Yes
Runs on
Android, Linux, Mac, Windows
Visit site Alternatives

Summary

Termshark is a terminal interface for tshark, intended for examining saved packet captures and live network traffic. It reads pcap files and can sniff live interfaces when tshark permits, then apply Wireshark display filters to either. Users can reassemble and inspect TCP and UDP flows, search packets, copy packet ranges, and view conversations involving Ethernet, IPv4, IPv6, UDP, and TCP. The project describes a remote debugging use case: inspecting a large capture on its machine rather than copying it to a desktop. It supports Linux, macOS, BSD variants, Android through Termux, and Windows, with precompiled executables available through GitHub releases. The program is free, but packet analysis requires tshark version 1.10.2 or newer to be available in the PATH. The project also notes that tshark includes capabilities Termshark does not currently expose. Its user guide estimates loaded packet data at approximately 10 MB of RAM for every 1,000 packets.

Who it is for

Termshark suits people debugging on remote machines who want to inspect captures without moving them to a desktop. It also fits terminal users who need display filters and TCP or UDP flow inspection.

What is good

  • Reads pcap files and can sniff live interfaces
  • Applies Wireshark display filters to captures
  • Reassembles and inspects TCP and UDP flows
  • Available on Windows, macOS, Linux, BSD, and Termux

What to know first

  • Requires tshark 1.10.2 or newer in PATH
  • Does not expose all tshark features
  • Loaded packet data uses about 10 MB per 1,000 packets

Verdict

Termshark provides packet inspection and filtering from a terminal, including for remote capture files and live traffic. Check the tshark dependency and the project's noted feature gap before relying on it for a particular workflow.

Termshark plans and pricing

All plans
Termshark Free Requires tshark in PATH · tshark v1.10.2 or newer · Some tshark features are not exposed github.com · 30 Sept 2026

Compared on network packet capture software

Free plan
Yestermshark.io
Live capture
Yestermshark.io
Offline trace analysis
Yestermshark.io
Display filters
Yestermshark.io
Capture file formats
pcaptermshark.io
Command-line capture
Yestermshark.io
Supported platforms
Linux, macOS, BSD variants, Android (Termux), Windowstermshark.io

Facts

Purpose
Termshark is a terminal user interface for tshark, inspired by Wireshark.termshark.io · 30 Sept 2026
Use case
The project describes using Termshark to inspect a large pcap on a remote machine without copying it to a desktop.github.com · 30 Sept 2026
Capture and files
Termshark can read pcap files and sniff live interfaces when tshark is permitted.github.com · 30 Sept 2026
Filters
It filters pcaps and live captures using Wireshark display filters.github.com · 30 Sept 2026
Stream analysis
It can reassemble and inspect TCP and UDP flows.github.com · 30 Sept 2026
Conversations
Its conversation view currently supports Ethernet, IPv4, IPv6, UDP, and TCP.github.com · 30 Sept 2026
Packet search
The project homepage lists packet search among the features introduced in version 2.4.termshark.io · 30 Sept 2026
Profiles
The homepage says version 2.4 includes profiles for colors and columns.termshark.io · 30 Sept 2026
Runtime dependency
Termshark requires tshark version 1.10.2 or higher in the PATH for packet analysis.github.com · 30 Sept 2026
Platform support
The project lists downloads for Linux, macOS, BSD variants, Android through Termux, and Windows.github.com · 30 Sept 2026
Downloads
Precompiled executables are available through the project's GitHub releases.github.com · 30 Sept 2026
Support
The homepage directs users to GitHub for setup, bugs, and feature requests.termshark.io · 30 Sept 2026
License
The GitHub repository identifies the project as MIT licensed.github.com · 30 Sept 2026
Limit
The project notes that tshark has more features than Termshark currently exposes.github.com · 30 Sept 2026
Packet files
It reads pcap files and can sniff live interfaces.termshark.io · 30 Sept 2026
Filtering
It supports Wireshark display filters for pcap files and live captures.github.com · 30 Sept 2026
Packet copying
It can copy ranges of packets to the clipboard from the terminal.github.com · 30 Sept 2026
Search and profiles
Version 2.4 added packet search and profiles for colors and columns.termshark.io · 30 Sept 2026
Terminal support
The program supports 16-color, 256-color and truecolor terminal modes.github.com · 30 Sept 2026
Dependencies
Termshark depends on tshark, tcell and gowid, and tshark must be available in PATH.github.com · 30 Sept 2026
Resource use
The user guide says loaded packet data uses approximately 10 MB of RAM per 1,000 packets.github.com · 30 Sept 2026
Target users
The project is aimed at people debugging on remote machines who need to study pcaps without copying them to a desktop.termshark.io · 30 Sept 2026

Best Termshark alternatives

See all 19
Wireshark No. 2 8.1 No phone appFreeTShark No. 3 8.0 No phone appFreeMalcolm No. 4 7.9 No phone appFreePCAPdroid No. 5 7.8 Android onlyFreeArkime No. 6 7.7 No phone appFreetcpdump No. 7 7.6 No phone appFree

Where it ranks on Samsung Mobile US Press

Is Termshark yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Termshark

Sources