
Ettercap
6.0#21 in network protocol analyzersFree planFree planLinuxmacOSSelf-hosted
Visit
| Fact | Ettercap | Wireshark |
|---|---|---|
| Filtering | Its integrated filtering engine lets users write filters that can modify packet payloads; filters are compiled with etterfilter. | Users can filter packets using many criteria, including display filters for addresses, ports and protocols. |
| Purpose | Ettercap is a suite for man-in-the-middle testing with live connection sniffing, on-the-fly content filtering, protocol dissection, and network and host analysis. | Wireshark captures and interactively browses network traffic as a network protocol analyzer. |
Ettercap suits network testing and analysis work involving live traffic, protocol dissection, or host and network inspection. It is aimed at users comfortable with supported systems and, for source builds, the listed development dependencies.
Wireshark is suited to network professionals, security experts, developers, and educators who need to inspect captured traffic. It supports both graphical and terminal-based analysis.