What's really happening in your cloud?
Stratoshark lets you explore and analyze applications at the system call level using a mature, proven interface based on Wireshark. Created for the community by Sysdig.
News
Stratoshark: Extending Wireshark's legacy into the cloud
Blog post by Gerald Combs and Loris Degioanni
Those Aren't Packets: How Stratoshark Brings the Power of Wireshark
to the Cloud
Blog post by Gerald Combs
Getting Started With Stratoshark
Blog post by Josh Clark
Download
The latest release of Stratoshark is 0.9.2. You can get it at the following locations: Read all release notesLearn
Stratoshark lets you explore and investigate the application-level behavior of your systems. You can capture system call and log activity and use a variety of advanced features to troubleshoot and analyze that activity. If you've ever used Wireshark, Stratoshark will look very familiar! It's a sibling application that shares the same dissection and filtering engine and much of the same user interface. It supports the same file format as Falco and Sysdig CLI, which lets you pivot seamlessly between each tool. As an added bonus, it's open source, just like Wireshark and Falco.
Getting Started With Stratoshark, blog post by Josh Clark
Stratoshark remote capture tutorial, blog post by Philippe Bogaerts
Videos
Get Help
The #stratoshark channel on the Wireshark Discord server