Bring the Power of Wireshark to Syscalls and Logs with Stratoshark

Explore Stratoshark, a powerful system call and log analyzer that extends Wireshark's renowned exploration and analysis capabilities to Linux system calls and real-time log events in this 43-minute conference talk. Discover how this innovative tool, built on Wireshark's familiar interface, integrates data sources from Falco's open source detection engine to enable deep analysis and troubleshooting across Linux servers, Kubernetes clusters, and cloud-native environments. Learn from Gerald Combs, creator of Wireshark and co-creator of Stratoshark, as he provides project updates since its January announcement and demonstrates live functionality including system call analysis and AWS audit event processing. Gain insights into how Stratoshark modernizes and broadens Wireshark's use cases for contemporary cloud-native computing while maintaining the intuitive user experience that made Wireshark the standard for network protocol analysis.