tethereal and tshark are command-line versions of Wireshark, available in many Unix/Linux machines. Tcpdump and snoop are command-line packets sniffing tools on Unix/Linux machines, widely used in the pre-GUI era. Some of the most widely used Packet sniffing and analysis tools are Wireshark, OmniPeek, Snort, tcpdump, and snoop. Identification of bandwidth utilization.Identification of malicious network activity.Some of the most common problems that can be easily resolved by using a packet sniffer or packet analysis tool are: Many important packet analysis tools are used by Network and VoIP Engineers to rectify VoIP QoS issues. Going deeper inside network communication at the packet level will reveal the cause of many problems.

Packet analysis tools are a great source to identify such issues. Voice quality issues are among the most important issues in VoIP, which are very hard to locate. Sometimes, when things are going crazy in a business VoIP network, it’s tough to trace the problem’s root cause.

Use snort to read wireshark pcap