macOS
brew install ngreplocal Homebrew formula metadata
sudo port install ngrepMacPorts ports tree · net/ngrep/Portfile · ソース: api.github.com
brew
ngrep のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
インストール
brew install ngreplocal Homebrew formula metadata
sudo port install ngrepMacPorts ports tree · net/ngrep/Portfile · ソース: api.github.com
sudo apk add ngrepAlpine Linux edge package indexes · ngrep · ソース: dl-cdn.alpinelinux.org
sudo apt install ngrepDebian stable package indexes · ngrep · ソース: deb.debian.org
sudo dnf install ngrepFedora Rawhide package metadata · ngrep · ソース: dl.fedoraproject.org
nix profile install nixpkgs#ngrepnixpkgs package indexes · pkgs/by-name/ng/ngrep/package.nix · ソース: api.github.com
sudo pacman -S ngrepArch Linux sync databases · ngrep · ソース: geo.mirror.pkgbuild.com
sudo zypper install ngrepopenSUSE Tumbleweed package metadata · ngrep · ソース: download.opensuse.org
概要
Network grep
履歴
ngrep is "network grep": a pcap-based command-line packet analyzer that applies regular-expression or hexadecimal matching to packet payloads while also accepting BPF filters like tcpdump. It is built for quick inspection of plaintext traffic and saved capture files.
ngrep was written by Jordan Ritter and dates back to the early 2000s; a freshmeat announcement for ngrep 1.39.1 appeared on April 23, 2001. The tool's identity has stayed stable: bring GNU grep-style matching to the network layer.
The project lived for years as a classic Unix network utility and later moved active issue and patch handling to GitHub. Its README still frames ngrep as a PCAP tool that understands IPv4/IPv6, TCP, UDP, ICMP, IGMP, raw packets, several link-layer interface types, and BPF filter logic.
ngrep became a small but widely packaged troubleshooting utility because it sits between tcpdump and a full packet analyzer. It was included de facto in many popular distributions over decades, and the maintainer explicitly asks distribution package maintainers to forward bugs and patches so upstream can track downstream fixes.
Its adoption is bounded by encryption. ngrep is excellent for DNS, old HTTP, SMTP, SIP, IMAP, test traffic, malware beacons in plaintext, and pcap triage; it is less useful when payloads are TLS-encrypted unless the useful signal is in headers, metadata, or local decrypted test traffic.
A typical workflow is `sudo ngrep -d any -W byline 'Host:|User-Agent:' tcp port 80`, or using an empty match expression with a BPF filter to print payloads for a protocol. It can read and write pcap dump files, making it useful for quick command-line passes before opening Wireshark.
Package nerds install it because it is the fast, memorable answer to "show me packets containing this string". It is especially handy on servers where a GUI analyzer is unavailable and tcpdump output is too raw for the immediate question.
ngrep is a survivor from the era when small C network tools solved one sharp problem well. It matters less as a dependency and more as an operator tool: a tiny package that can save a debugging session when traffic is still human-readable.
セキュリティ状態
broad file, network, media, or database tool signal.
リスク blue · 信頼度 中 · tool
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
ngrep | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
インストールメタデータ
| パッケージキー | brew:ngrep |
|---|---|
| バージョン | 1.49.0 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/ngrep |
| ホームページ | https://github.com/jpr5/ngrep |
| リポジトリ | https://github.com/jpr5/ngrep |
| 上流ドキュメント | https://github.com/jpr5/ngrep#readme |
| ライセンス | ngrep |
| ソースアーカイブ | https://github.com/jpr5/ngrep/archive/refs/tags/v1.49.0.tar.gz |
| 最終更新 | 2026-06-25T13:37:57+02:00 |
| Pulse | updated |
| 依存関係 | libpcap, pcre2 |
| Bottle | 利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | ngrep |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
ngrep 1.47+ds1-6
grep for network traffic
sudo apt install ngrepngrep
nix profile install nixpkgs#ngrepngrep 1.47+ds1-5build2
grep for network traffic
sudo apt install ngrepngrep 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface
https://ngrep.sourceforge.net/
sudo apk add ngrepngrep-dbg 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface (debug symbols)
https://ngrep.sourceforge.net/
sudo apk add ngrep-dbgngrep-doc 1.49.0-r0
A grep-like utility that allows you to search for network packets on an interface (documentation)
https://ngrep.sourceforge.net/
sudo apk add ngrep-docngrep 1.47^20241209gitb2e3ba3-4.fc44
Network layer grep tool
sudo dnf install ngrepngrep 1.49.0-1
A grep-like utility that allows you to search for network packets on an interface.
https://github.com/jpr5/ngrep/
sudo pacman -S ngrepngrep 1.49.0-1.3
Network grep
sudo zypper install ngrepngrep
sudo port install ngrepソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.