pkg.soopen package index

brew / rank 13737

Install daemonlogger with Homebrew, apt, MacPorts

Network packet logger and soft tap daemon. Version 1.2.1 via Homebrew; verified from local package data. Also installable with debian: sudo apt install daemonlogger.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install daemonlogger

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install daemonlogger

MacPorts ports tree · net/daemonlogger/Portfile · source: api.github.com

Linux

Debian aptverified · 92%
sudo apt install daemonlogger

Debian stable package indexes · daemonlogger · source: deb.debian.org

overview

Package summary

Network packet logger and soft tap daemon

Commands and aliases

  • daemonlogger

history

Project history and usage

Daemonlogger is a small libpcap-based packet logging and soft-tap daemon. Its package-manager appeal is straightforward: it gives Unix users a dedicated command-line tool for capturing packets to rolling pcap files or forwarding captured traffic out another interface without adopting a larger IDS stack.

Project history

The official README credits Martin Roesch as author and records Sourcefire copyright from 2006-2013, followed by Cisco copyright from 2013-2021. The current official GitHub repository describes itself as the official repository and was created under Cisco-Talos in 2015, after Cisco's Sourcefire acquisition era had folded the tool into Cisco's security tooling orbit.

Adoption history

Daemonlogger's adoption has been strongest in packet-capture and security-operations environments where pcap output, BPF filters, daemon mode, and ring-buffer behavior are enough. Its official README still points users to the daemonlogger-users mailing list, reflecting an older SourceForge-era open-source support pattern.

How it is used

Users run daemonlogger with switches for interface selection, daemonization, BPF filter files, packet-count limits, output paths, ring-buffer pruning, rollover size or time, and soft-tap output. The README explicitly frames its BPF filter syntax as familiar to tcpdump or Snort users.

Why package nerds care

Daemonlogger matters to package nerds because it is a narrow, old-school Unix networking utility: one executable, libpcap/libdnet dependencies, pcap files as the interchange format, and behavior that fits service managers and shell scripts.

Timeline

  • 2006: Sourcefire copyright period for Daemonlogger begins.
  • 2013: Cisco copyright period begins.
  • 2015: Official Cisco-Talos GitHub repository is created.
  • 2021: README lists version 1.2.1 and Cisco copyright through 2021.

Related projects

  • Daemonlogger sits near tcpdump, Snort, libpcap, and libdnet in the Unix packet-capture ecosystem.

security posture

Risk level: blue

broad file, network, media, or database tool signal.

Risk classifier

blue risk · medium confidence · tool

Why

  • broad file, network, media, or database tool signal

Signals

  • text:network

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
daemonloggerexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.2.1
manager updated
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:daemonlogger
Version1.2.1
Package managerHomebrew
Homepagehttps://sourceforge.net/projects/daemonlogger/
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

daemonlogger 1.2.2-1

simple network packet logger and soft tap daemon

https://github.com/Cisco-Talos/Daemonlogger

sudo apt install daemonlogger
  • Section: net
  • Architecture: amd64
  • 3 dependencies
  • normalized package name match
  • Matched by: Daemonlogger
Debian stable package indexes · deb.debian.org · Debian stable package indexes: daemonlogger from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt95%

daemonlogger 1.2.1-8build3

simple network packet logger and soft tap daemon

http://www.snort.org/users/roesch/Site/Daemonlogger/Daemonlogger.html

sudo apt install daemonlogger
  • Section: universe/net
  • Architecture: amd64
  • 3 dependencies
  • normalized package name match
  • Matched by: Daemonlogger
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: daemonlogger from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
MacPorts95%

daemonlogger

sudo port install daemonlogger
  • normalized package name match
  • Matched by: Daemonlogger
MacPorts ports tree · api.github.com · MacPorts ports tree: net/daemonlogger/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation