Build Status

A library for reading and writing packets to an interface or to a libpcap-formatted file.

It is maintained at .


PacketFu is yard-compatible (as well as sdoc/rdoc, if you prefer). You can generate local documentation easily with either `yard doc .` or `sdoc`, and view doc/index.html with your favored browser. Once that's done, navigate at the top, and read up on how to create a Packet or Capture from an interface with show_live or whatever.



$ rvm gem install pcaprub

Marshall Beddoe's PcapRub is required only for packet reading and writing from a network interfaces (which is a pretty big only). PcapRub itself relies on libpcap 0.9.8 or later for packet injection. PcapRub also requires root privileges to access the interface directly.


Given the security issues with older Rubies and the long-past [EOL for 1.8.x](, PacketFu is rather stuck on very recent versions of 1.9.3 (as of this moment, the version to trust is 1.9.3-p484).


EOL, no longer supported in any sense. PacketFu may or may not work.




Not yet vetted. I don't believe there's anything exciting in these platforms, but there has been no attempt yet to perform formal testing. I know, I'm behind the times.


PacketFu ships with dozens and dozens of tests, built on Test::Unit. These should give good pointers on how you're expected to use it. See the /tests directory. Furthermore, PacketFu also ships with packetfu-shell.rb, which should be run via IRB (as root, if you intend to use your interfaces).


PacketFu is maintained primarily by Tod Beardsley [email protected] and Jonathan Claudius [email protected], with help from Open Source Land.

See LICENSE for licensing details.