ngrep
grep for network packets.
KaliParrotLinuxpassive
pkg: ngrep
ngrep matches regular expressions against packet payloads — quickly find credentials or strings on the wire.
Syntax
ngrep -d {iface} "{pattern}" {filter}
Example
ngrep -d eth0 "pass" port 80
Shows HTTP packets whose payload contains "pass".
Advantages
- Regex on live traffic
- Lightweight
Disadvantages
- Cleartext only
- Needs privileges
Tags
#sniffing#grep
Official docs: ngrep ↗
Related commands
Frequently asked questions
What is ngrep used for?
ngrep matches regular expressions against packet payloads — quickly find credentials or strings on the wire.
What is an example ngrep command?
A common example is: ngrep -d eth0 "pass" port 80 — Shows HTTP packets whose payload contains "pass".
Is ngrep part of Kali Linux?
Yes. ngrep ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install ngrep.
What category of security tool is ngrep?
ngrep is a Sniffing & Spoofing tool with a passive-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.