oryx

Oryx is a powerful network traffic sniffer built on eBPF technology that brings real-time traffic inspection directly to your terminal. It provides a text-based user interface (TUI) for visualizing and analyzing network behavior on Linux systems without the overhead of traditional packet capture tools.

Key capabilities include:

• Real-time traffic inspection with live visualization of network packets
• Comprehensive traffic statistics including terminal graphs and charts for analyzing patterns
• Multi-interface monitoring supporting wlan0, localhost, docker0, and other network interfaces
• Fuzzy search functionality to quickly locate specific traffic patterns or connections
• Firewall management with rule creation, editing, and persistent storage
• Protocol support across transport (TCP, UDP, SCTP), network (IPv4/v6, ICMP, IGMP), and link layers (ARP)
• Data export capabilities to save captured traffic for further analysis
• Keyboard shortcuts for efficient navigation and interaction

Oryx is particularly valuable for developers, network administrators, and security professionals who need to understand network behavior in real-time. Whether you're debugging network issues, analyzing traffic patterns, or implementing security monitoring on eBPF-enabled systems, oryx provides the visibility you need directly in your terminal. Requires Linux kernel 6.10 or higher for optimal functionality.