GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Download
  • Learn
  • Docs
  • Blog
  • More
  • Wireshark
  • SharkFest
  • Foundation
  • Falco

This view

  • Original page
  • New address

GeezerVison is showing stratoshark.org — Stratoshark — Open-source system-call and log analyzer

Open-source system-call & log analyzer

What's really happening in your cloud?

Work with system calls and logs in a structured, repeatable, graphical way, on a single Linux machine, in containers, or across the cloud. Built on the proven interface of Wireshark. Made possible with major support from Sysdig.

Download 1.0.0rc2 Learn more
Latest version
1.0.0rc2
Released November 2026
Supported by
Sysdig
Major supporter of the project
Family
Wireshark sibling
Same dissection & filter engine
What is Stratoshark

Wireshark for system calls and logs

Stratoshark turns system call and log activity into something you can filter, color-code, graph, and save, instead of scrolling through raw trace output. Capture once, keep the file, and come back to it or share it with the same filters and views. That makes your debugging structured and repeatable, whether it's a one-off issue on your workstation or a recurring problem in production.

If you've ever used Wireshark, Stratoshark will look very familiar. It's a sibling application that shares the same dissection and filtering engine and much of the same user interface. It supports the same file format as Falco and the Sysdig CLI, which lets you pivot seamlessly between each tool.

Read the quickstart

Stratoshark UI with a filter applied
Supported by
Stratoshark is made possible with major support from Sysdig. Interested in backing Stratoshark? Become a sponsor.
Why use Stratoshark

Three reasons it fits your toolbox

Built for anyone who debugs with system calls day to day, on a laptop, a server, or a Kubernetes cluster, and for engineers who already think in Wireshark filters.

Familiar interface

If you know Wireshark, you already know Stratoshark — same UI, same filter language, same workflow. Zero ramp-up for existing Wireshark users.

Quickstart →

Interoperable

Read and write a standardized capture file format. Move between analysis tools without conversion, lossy exports, or losing context.

Learn more →

Open source

Free, free as in freedom. Source on GitLab, community on Discord, contributions welcome. The Wireshark Foundation backs it.

Source →
Watch

Stratoshark, explained

A short introduction by Sysdig. More talks and tutorials live on the Learn page.

News

From the Stratoshark community

Wireshark Expands Board of Directors with a Renewed Vision for the Future

The Wireshark Foundation, home of Stratoshark, announces an expanded nine-member Board, including Sysdig founder Loris Degioanni.

Wireshark Foundation · Oct 2026 Wireshark

Network Forensics: Getting Started With Stratoshark

An introduction to Stratoshark for forensics work: capturing system activity from the Linux kernel and analyzing it.

aircorridor · Jun 2025 Hackers Arise

Up and running with Stratoshark in 5 minutes

Install Stratoshark, capture system calls from a remote Linux host, and use them to spot cryptomining activity.

Alex Lawrence · May 2025 Sysdig
See all news
Get help

Stuck? The community is here.

Wireshark Q&A #stratoshark on Discord Stratoshark wiki
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.