Open-source system-call & log analyzer

What's really happening in your cloud?

Work with system calls and logs in a structured, repeatable, graphical way, on a single Linux machine, in containers, or across the cloud. Built on the proven interface of Wireshark. Made possible with major support from Sysdig.

Download 0.10.4 Learn more

Latest version

0.10.4

Released October 2026

Supported by

Sysdig

Major supporter of the project

Family

Wireshark sibling

Same dissection & filter engine

What is Stratoshark

Wireshark for system calls and logs

Stratoshark turns system call and log activity into something you can filter, color-code, graph, and save, instead of scrolling through raw trace output. Capture once, keep the file, and come back to it or share it with the same filters and views. That makes your debugging structured and repeatable, whether it's a one-off issue on your workstation or a recurring problem in production.

If you've ever used Wireshark, Stratoshark will look very familiar. It's a sibling application that shares the same dissection and filtering engine and much of the same user interface. It supports the same file format as Falco and the Sysdig CLI, which lets you pivot seamlessly between each tool.

Read the quickstart

Why use Stratoshark

Three reasons it fits your toolbox

Built for anyone who debugs with system calls day to day, on a laptop, a server, or a Kubernetes cluster, and for engineers who already think in Wireshark filters.