Stratoshark
Dev tools
system call tracing
SHOW HN2025
How HN took it
11 positive, 19 neutral or asking, 0 mixed, 1 critical, out of 31 comments about the project. Thread score +0.31.
Docs: 1 for, 1 againstIdea: 1 for, 0 againstPerformance: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Long-time Wireshark users welcome the sibling tool
From 3 comments
Long, long time user of Wireshark and I instantly recognize your name. Thank you for all the great work over the years :-) Looks really awesome! I didn't see Linux installation…
freedomben on HNWow, I've been a wireshark user for many years, this is really exciting.
jcul on HNhaving used wireshark since i was a kid... this looks really promising
napolux on HN
Useful for troubleshooting and education
From 1 comment
Thanks for your work! Been using Wireshark for many years after it was used for a network course in university. Why do you focus on "what happens in your cloud" when we talk…
vasco on HN
Objections
Homepage did not clearly explain what the app does
From 1 comment
The first section on the homepage doesn’t give me a good sense of what the application does. The references to Wireshark suggest it has something to do with network traffic but…
pimlottc on HN
Capture limited to Linux
From 2 comments
The tools are similar in many ways, but Stratoshark shares Wireshark's dissection, filtering, and UI code, which provides a more low-level details and a free-form filtering…
geraldcombs on HNRight now the UI runs on Windows, macOS, and Linux but you can only capture system calls on Linux via Falco libs[1]. Expanding local capture to include macOS and Windows is…
geraldcombs on HN
Flagged as grayware by Palo Alto filtering
From 1 comment
The OP URL has been flagged as grayware by Palo Alto and is thus inaccessible to a large number of people, possibly indicating typosquatting, or being miscategorized?…
observationist on HN
Requests
Add macOS and Windows capture
From 1 comment
Right now the UI runs on Windows, macOS, and Linux but you can only capture system calls on Linux via Falco libs[1]. Expanding local capture to include macOS and Windows is…
geraldcombs on HN
Support for active rule-based syscall modification
From 1 comment
Can this program do more than just observe and trace what happens? Can one use it to set up some rule to suppress some of the syscalls sent to a specific process? Or alter them…
imcritic on HN
Questions
Is Linux supported and is this in the Wireshark repo
From 1 comment
Long, long time user of Wireshark and I instantly recognize your name. Thank you for all the great work over the years :-) Looks really awesome! I didn't see Linux installation…
freedomben on HN
How syscalls are captured on macOS
From 1 comment
How does it trace syscalls on macos? Do you need to disable SIP?
brutopia on HN
Whether sysdig still needs a kernel module
From 1 comment
Does sysdig (and stratoshark by extension) still require custom out-of-tree kernel module to function?
zokier on HN
Alternatives named
strace
From 1 comment
Wireshark is to tcpdump as stratoshark is to strace. Did I get the analogy right?
clbrmbr on HN
DTrace
From 1 comment
So, DTrace with Wireshark UI?
sesm on HN
Sysinternals procmon
From 1 comment
Would I be right in assuming this is like Sysinternals procmon but with a better interface and for Linux?
thesuitonym on HN