Stratoshark What's really happening in your cloud? Stratoshark lets you explore and analyze applications at the system call level using a mature, proven interface based on Wireshark. Created for the community by Sysdig. News Stratoshark: Extending Wireshark's legacy into the cloud Blog post by Gerald Combs and Loris Degioanni Those Aren't Packets: How Stratoshark Brings the Power of Wireshark to the Cloud Blog post by Gerald Combs Getting Started With Stratoshark Blog post by Josh Clark Download The latest release of Stratoshark is 0.10.2. You can get it at the following locations: Windows x64 installer Windows Arm64 installer macOS Universal disk image Source code Read all release notes Learn Stratoshark lets you explore and investigate the application-level behavior of your systems. You can capture system call and log activity and use a variety of advanced features to troubleshoot and analyze that activity. If you've ever used Wireshark, Stratoshark will look very familiar! It's a sibling application that shares the same dissection and filtering engine and much of the same user interface. It supports the same file format as Falco and Sysdig CLI, which lets you pivot seamlessly between each tool. As an added bonus, it's open source, just like Wireshark and Falco. Quick start guide Stratoshark wiki page Getting Started With Stratoshark, blog post by Josh Clark Stratoshark remote capture tutorial, blog post by Philippe Bogaerts Videos Stratoshark demo from Sysdig Stratoshark Explained: Wireshark for System Calls, Containers & Cloud by Sysdig Open Source Summit 2025: Bring the Power of Wireshark To Syscalls and Logs With Stratoshark by Gerald Combs Stratoshark Tutorial: Getting Started with Gerald Combs by Chris Greer Stratoshark demo by Ross Bagurdes