← Back to context

Comment by clbrmbr

1 month ago

Wireshark is to tcpdump as stratoshark is to strace.

Did I get the analogy right?

Pretty much. It's part of the same ecosystem as Sysdig OSS[1], which works much like strace. It uses the same underlying libraries as sysdig and Falco, and you can move capture files between them.

It'd be interesting to see if we can integrate more fully with strace as well, but that might require updating strace itself.

[1]https://github.com/draios/sysdig