Automic VaultAutomic Vault

brew

Install libtrace with Homebrew, Nix

Library for trace processing supporting multiple inputs. Version 4.0.33 via Homebrew; verified 2026-06-10.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install libtrace

local Homebrew formula metadata

Linux

Nixverified · 92%
nix profile install nixpkgs#libtrace

nixpkgs package indexes · pkgs/by-name/li/libtrace/package.nix · source: api.github.com

overview

Package summary

Library for trace processing supporting multiple inputs

Commands and aliases

  • traceconvert
  • tracediff
  • traceends
  • tracefilter
  • tracemcast
  • tracemerge
  • tracepktdump
  • tracereplay
  • tracereport
  • tracertstats
  • tracesplit
  • tracesplit_dir
  • tracestats
  • tracesummary
  • tracetop
  • tracetopends
  • traceucast

history

Project history and usage

libtrace is a C library and suite of trace tools for processing live and offline network packet captures across multiple trace and interface formats.

Project history

The libtrace README states that the code was originally developed by the University of Waikato WAND research group and was primarily designed for the real-time interface to the Waikato DAG Capture Point software. It later grew beyond that original environment to support a range of trace and interface formats.

The repository records copyright for University of Waikato code through 2022 and for later code and documentation contributed by Shane Alcock from 2023 through 2026. The 4.0 series introduced a parallel packet-processing API for multithreaded workloads.

Adoption history

libtrace's adoption is strongest in network measurement, packet-trace analysis, and research tooling rather than broad desktop use. Its command-line utilities, including traceconvert, tracefilter, tracemerge, tracereport, tracesplit, tracestats, and tracesummary, made it useful as both a library and a practical trace-processing toolkit.

How it is used

Users employ libtrace to read, filter, convert, replay, summarize, and report on traffic captures from offline files or live interfaces. Developers link against the library when they need one API over multiple capture formats and, in the 4.0 line, when they need parallel packet processing.

Why package nerds care

For packet-analysis package nerds, libtrace is interesting because it is not just another pcap wrapper: it comes from a university measurement environment, carries a family of trace* command-line tools, and preserves support for specialized capture systems alongside common packet formats.

Timeline

  • 2007-2022: University of Waikato copyright range shown in the README for code through version 4.0.20.
  • 2017: GitHub releases page lists libtrace 4.0.2 as a public 4.0-series release.
  • 2023: README records Shane Alcock copyright for newer code and documentation beginning in 2023.
  • 2026: GitHub releases page lists Libtrace 4.0.33 on June 10, 2026.

Related projects

  • Waikato DAG Capture Point software is the original environment named by the README.
  • libpacketdump, wandio, libwandder, and related LibtraceTeam repositories sit in the same packet-trace tooling ecosystem.
  • pcap-oriented tools such as tcpdump and Wireshark are adjacent consumers or producers of traffic capture data, though libtrace focuses on programmatic trace processing.

security posture

Risk level: green

library-like package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • library-like package without higher-risk signals

Signals

  • metadata:library-like

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 4 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
traceconvertcliglobal executable
tracediffcliglobal executable
traceendscliglobal executable
tracefiltercliglobal executable
tracemcastcliglobal executable
tracemergecliglobal executable
tracepktdumpcliglobal executable
tracereplaycliglobal executable
tracereportcliglobal executable
tracertstatscliglobal executable
tracesplitcliglobal executable
tracesplit_dircliglobal executable
tracestatscliglobal executable
tracesummarycliglobal executable
tracetopcliglobal executable
tracetopendscliglobal executable
traceucastcliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version4.0.33
manager updated2026-06-10
local dataok
upstreamcurrent
latest detected4.0.33-1

https://github.com/LibtraceTeam/libtrace

  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:libtrace
Version4.0.33
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/libtrace
Homepagehttps://github.com/LibtraceTeam/libtrace
Repositoryhttps://github.com/LibtraceTeam/libtrace
Upstream docshttps://github.com/LibtraceTeam/libtrace
LicenseGPL-2.0-or-later AND LGPL-3.0-or-later
Source archivehttps://github.com/LibtraceTeam/libtrace/archive/refs/tags/4.0.33-1.tar.gz
Last updated2026-06-10T13:29:49Z
Pulseupdated
Dependenciesopenssl@3, wandio
Build dependenciesautoconf, automake, libtool, pkgconf
Uses from macOSlibpcap, ncurses
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelibtrace
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

libtrace

nix profile install nixpkgs#libtrace
  • normalized package name match
  • Matched by: Libtrace
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/li/libtrace/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment