qtwirediff icon indicating copy to clipboard operation
qtwirediff copied to clipboard

Debugging tool to diff network traces via wireshark

qtwirediff

WireDiff is a debugging tool to diff network traffic leveraging Wireshark.

Wirediff lets you open 2 network traces packets side-by-side. You can select a packet from each trace and diff their content at the protocol level you want.

This is a rewrite of an older tool smbcmp [1] made more generic (smbcmp only dealt with SMB traffic).

WireDiff is licensed under the GPLv3 and originally written by Aurélien Aptel [email protected]. See LICENSE for more details.

1: https://smbcmp.github.io

Building

This project uses is based on qmake:

$ qmake-qt5 && make

Alternatively you can open the .pro file in QtCreator and build from there.

Running

WireDiff reads standard PCAP files. It requires "tshark" on the path.