macOS
brew install ngreplocal Homebrew formula metadata
sudo port install ngrepMacPorts ports tree · net/ngrep/Portfile · Source: api.github.com
brew
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de ngrep pour les workflows d'agents IA.
installation
brew install ngreplocal Homebrew formula metadata
sudo port install ngrepMacPorts ports tree · net/ngrep/Portfile · Source: api.github.com
sudo apk add ngrepAlpine Linux edge package indexes · ngrep · Source: dl-cdn.alpinelinux.org
sudo apt install ngrepDebian stable package indexes · ngrep · Source: deb.debian.org
sudo dnf install ngrepFedora Rawhide package metadata · ngrep · Source: dl.fedoraproject.org
nix profile install nixpkgs#ngrepnixpkgs package indexes · pkgs/by-name/ng/ngrep/package.nix · Source: api.github.com
sudo pacman -S ngrepArch Linux sync databases · ngrep · Source: geo.mirror.pkgbuild.com
sudo zypper install ngrepopenSUSE Tumbleweed package metadata · ngrep · Source: download.opensuse.org
aperçu
Network grep
historique
ngrep is "network grep": a pcap-based command-line packet analyzer that applies regular-expression or hexadecimal matching to packet payloads while also accepting BPF filters like tcpdump. It is built for quick inspection of plaintext traffic and saved capture files.
ngrep was written by Jordan Ritter and dates back to the early 2000s; a freshmeat announcement for ngrep 1.39.1 appeared on April 23, 2001. The tool's identity has stayed stable: bring GNU grep-style matching to the network layer.
The project lived for years as a classic Unix network utility and later moved active issue and patch handling to GitHub. Its README still frames ngrep as a PCAP tool that understands IPv4/IPv6, TCP, UDP, ICMP, IGMP, raw packets, several link-layer interface types, and BPF filter logic.
ngrep became a small but widely packaged troubleshooting utility because it sits between tcpdump and a full packet analyzer. It was included de facto in many popular distributions over decades, and the maintainer explicitly asks distribution package maintainers to forward bugs and patches so upstream can track downstream fixes.
Its adoption is bounded by encryption. ngrep is excellent for DNS, old HTTP, SMTP, SIP, IMAP, test traffic, malware beacons in plaintext, and pcap triage; it is less useful when payloads are TLS-encrypted unless the useful signal is in headers, metadata, or local decrypted test traffic.
A typical workflow is `sudo ngrep -d any -W byline 'Host:|User-Agent:' tcp port 80`, or using an empty match expression with a BPF filter to print payloads for a protocol. It can read and write pcap dump files, making it useful for quick command-line passes before opening Wireshark.
Package nerds install it because it is the fast, memorable answer to "show me packets containing this string". It is especially handy on servers where a GUI analyzer is unavailable and tcpdump output is too raw for the immediate question.
ngrep is a survivor from the era when small C network tools solved one sharp problem well. It matters less as a dependency and more as an operator tool: a tiny package that can save a debugging session when traffic is still human-readable.
posture de sécurité
broad file, network, media, or database tool signal.
risque blue · confiance moyen · tool
Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.
exécutables
| Commande | Type | Exposition | Note |
|---|---|---|---|
ngrep | cli | exécutable global |
fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
métadonnées d'installation
| Clé du paquet | brew:ngrep |
|---|---|
| Version | 1.49.0 |
| Gestionnaire de paquets | Homebrew |
| Page du gestionnaire de paquets | https://formulae.brew.sh/formula/ngrep |
| Page d'accueil | https://github.com/jpr5/ngrep |
| Dépôt | https://github.com/jpr5/ngrep |
| Docs amont | https://github.com/jpr5/ngrep#readme |
| Licence | ngrep |
| Archive source | https://github.com/jpr5/ngrep/archive/refs/tags/v1.49.0.tar.gz |
| Dernière mise à jour | 2026-06-25T13:37:57+02:00 |
| Pulse | updated |
| Dépendances | libpcap, pcre2 |
| Bouteille | disponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| post-install Homebrew | non défini |
| Service | aucun déclaré |
faits du registre
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | ngrep |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
correspondances dans les bases sources
Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.
ngrep 1.47+ds1-6
grep for network traffic
sudo apt install ngrepngrep
nix profile install nixpkgs#ngrepngrep 1.47+ds1-5build2
grep for network traffic
sudo apt install ngrepngrep 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface
https://ngrep.sourceforge.net/
sudo apk add ngrepngrep-dbg 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface (debug symbols)
https://ngrep.sourceforge.net/
sudo apk add ngrep-dbgngrep-doc 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface (documentation)
https://ngrep.sourceforge.net/
sudo apk add ngrep-docngrep 1.47^20241209gitb2e3ba3-4.fc44
Network layer grep tool
sudo dnf install ngrepngrep 1.49.0-1
A grep-like utility that allows you to search for network packets on an interface.
https://github.com/jpr5/ngrep/
sudo pacman -S ngrepngrep 1.49.0-1.3
Network grep
sudo zypper install ngrepngrep
sudo port install ngreppiste source
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.