The Everything Feed - All Packet Pushers Pods
PP062: Hunting for Host Security and Performance Issues with Stratoshark
May 13, 2025
Gerald Combs, CFO of the Wireshark Foundation and director of open source projects at Sysdig, shares his insights on Stratoshark, a tool designed to analyze system calls. He discusses how Stratoshark aids network, security, and application teams in diagnosing performance issues while investigating potential malware threats. The conversation highlights the tool's user-friendly design and its role in bridging communication between systems, touching on the importance of real-time monitoring and collaboration among teams for enhanced security.
33:45
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Stratoshark offers a new perspective on system call analysis, enhancing the ability to troubleshoot and identify performance and security issues in applications.
- The community-driven development of Stratoshark fosters innovation and collaboration, ensuring the tool effectively meets the evolving needs of users and developers alike.
Deep dives
Introduction to Stratoshark
Stratoshark is a new tool designed for analyzing system calls, functioning as a sibling application to the well-known Wireshark. Unlike Wireshark's focus on network traffic, Stratoshark delves into system calls made by various programs on devices, enabling users to gain insights into the interactions between applications and the operating system. The tool provides a means to capture, browse, and analyze this data interactively, opening up a wealth of information related to system-level activities. This shift towards system call analysis broadens the horizons for troubleshooting, performance analysis, and security assessments.
