# Install libtrace with Homebrew, Nix

Library for trace processing supporting multiple inputs. Version 4.0.33 via Homebrew; verified 2026-06-10.

## Install

```sh
sudo av install brew:libtrace
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install libtrace
```

  Evidence: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#libtrace
```

  Evidence: nixpkgs package indexes: pkgs/by-name/li/libtrace/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:libtrace
- **Package manager:** Homebrew
- **Package manager page:** <https://formulae.brew.sh/formula/libtrace>
- **Version:** 4.0.33
- **Source summary:** Library for trace processing supporting multiple inputs
- **Homepage:** <https://github.com/LibtraceTeam/libtrace>
- **Repository:** <https://github.com/LibtraceTeam/libtrace>
- **Upstream docs:** <https://github.com/LibtraceTeam/libtrace>
- **License:** GPL-2.0-or-later AND LGPL-3.0-or-later
- **Source archive:** <https://github.com/LibtraceTeam/libtrace/archive/refs/tags/4.0.33-1.tar.gz>
- **Last updated:** 2026-06-10T13:29:49Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- traceconvert (cli)
- tracediff (cli)
- traceends (cli)
- tracefilter (cli)
- tracemcast (cli)
- tracemerge (cli)
- tracepktdump (cli)
- tracereplay (cli)
- tracereport (cli)
- tracertstats (cli)
- tracesplit (cli)
- tracesplit_dir (cli)
- tracestats (cli)
- tracesummary (cli)
- tracetop (cli)
- tracetopends (cli)
- traceucast (cli)
- traceconvert (alias)
- tracediff (alias)
- traceends (alias)
- tracefilter (alias)
- tracemcast (alias)
- tracemerge (alias)
- tracepktdump (alias)
- tracereplay (alias)
- tracereport (alias)
- tracertstats (alias)
- tracesplit (alias)
- tracesplit_dir (alias)
- tracestats (alias)
- tracesummary (alias)
- tracetop (alias)
- tracetopends (alias)
- traceucast (alias)

## Dependencies

- openssl@3
- wandio

## Build dependencies

- autoconf
- automake
- libtool
- pkgconf

## Uses from macOS

- libpcap
- ncurses

## Install behavior

- Post-install hook: not defined
- Bottle: available on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 4.0.33
- Package-manager updated: 2026-06-10
- Local data: ok
- Upstream repository: https://github.com/LibtraceTeam/libtrace
- Upstream latest detected: 4.0.33-1 (current)
## Project history and usage

libtrace is a C library and suite of trace tools for processing live and offline network packet captures across multiple trace and interface formats.

### Project history

The libtrace README states that the code was originally developed by the University of Waikato WAND research group and was primarily designed for the real-time interface to the Waikato DAG Capture Point software. It later grew beyond that original environment to support a range of trace and interface formats.

The repository records copyright for University of Waikato code through 2022 and for later code and documentation contributed by Shane Alcock from 2023 through 2026. The 4.0 series introduced a parallel packet-processing API for multithreaded workloads.

### Adoption history

libtrace's adoption is strongest in network measurement, packet-trace analysis, and research tooling rather than broad desktop use. Its command-line utilities, including traceconvert, tracefilter, tracemerge, tracereport, tracesplit, tracestats, and tracesummary, made it useful as both a library and a practical trace-processing toolkit.

### How it is used

Users employ libtrace to read, filter, convert, replay, summarize, and report on traffic captures from offline files or live interfaces. Developers link against the library when they need one API over multiple capture formats and, in the 4.0 line, when they need parallel packet processing.

### Why package nerds care

For packet-analysis package nerds, libtrace is interesting because it is not just another pcap wrapper: it comes from a university measurement environment, carries a family of trace* command-line tools, and preserves support for specialized capture systems alongside common packet formats.

### Timeline

- 2007-2022: University of Waikato copyright range shown in the README for code through version 4.0.20.
- 2017: GitHub releases page lists libtrace 4.0.2 as a public 4.0-series release.
- 2023: README records Shane Alcock copyright for newer code and documentation beginning in 2023.
- 2026: GitHub releases page lists Libtrace 4.0.33 on June 10, 2026.

### Related projects

- Waikato DAG Capture Point software is the original environment named by the README.
- libpacketdump, wandio, libwandder, and related LibtraceTeam repositories sit in the same packet-trace tooling ecosystem.
- pcap-oriented tools such as tcpdump and Wireshark are adjacent consumers or producers of traffic capture data, though libtrace focuses on programmatic trace processing.

### Sources

- <http://www.wand.net.nz/>
- <https://github.com/LibtraceTeam/libtrace>
- <https://github.com/LibtraceTeam/libtrace/releases>
- <https://github.com/LibtraceTeam/libtrace/wiki/ChangeLog>


## Security Notes

library-like package without higher-risk signals.

- **Geiger risk:** green / low
- library-like package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** libtrace
- **Version Scheme:** 0
- **Revision:** 0
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** stable

## Other Package-Manager Records

- Nix - libtrace: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libtrace/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Related links

- [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata.
- [Homebrew utility packages](https://www.automicvault.com/pkg/brew-utility-packages/) - Matched Homebrew package provider.
- [openssl@3](https://www.automicvault.com/pkg/brew/openssl-3/) - Runtime dependency declared by Homebrew.
- [wandio](https://www.automicvault.com/pkg/brew/wandio/) - Runtime dependency declared by Homebrew.
- [autoconf](https://www.automicvault.com/pkg/brew/autoconf/) - Build dependency declared by Homebrew.
- [automake](https://www.automicvault.com/pkg/brew/automake/) - Build dependency declared by Homebrew.
- [libtool](https://www.automicvault.com/pkg/brew/libtool/) - Build dependency declared by Homebrew.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - Build dependency declared by Homebrew.
- [libprotoident](https://www.automicvault.com/pkg/brew/libprotoident/) - Popular package that depends on this formula.
- [httpflow](https://www.automicvault.com/pkg/brew/httpflow/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [httpry](https://www.automicvault.com/pkg/brew/httpry/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [ipsumdump](https://www.automicvault.com/pkg/brew/ipsumdump/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [miruo](https://www.automicvault.com/pkg/brew/miruo/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [ngrep](https://www.automicvault.com/pkg/brew/ngrep/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [packetq](https://www.automicvault.com/pkg/brew/packetq/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [pktanon](https://www.automicvault.com/pkg/brew/pktanon/) - Shares av.db curated category or tags: cli, networking, packet-analysis.
- [sngrep](https://www.automicvault.com/pkg/brew/sngrep/) - Shares av.db curated category or tags: cli, networking, packet-analysis.

## Combined YAML source

View the package source record on GitHub. [combined/libtrace.yml](https://github.com/automic-vault/db/blob/main/combined/libtrace.yml)


## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph
