SF22US Keynote - Introducing Logray | The Future of Packet Analysis

This is the second keynote for SharkFest'22 US, called: "Introducing Logray" and was given by Gerald Combs and Loris Degioanni. This was recorded on July 13th in Kansas City, MO.

SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.

SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.

SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both."

Chapters:
0:00 Introduction
2:25 Packet Analysis History
5:45 Packets
9:26 TCPDump & Sysdig
11:45 Why Logray and how it works
25:35 Examples
28:30 Wireshark + Logray
38:56 LIve Demo
47:46 Future of Logray and Wireshark
51:37 Q&A

[djdawso]

What a fantastic looking tool! In my 35+ years troubleshooting networks (26+ years with Cisco's CCIE certification) I came to depend very heavily on various system logs as they are often the best source of truth about which device is doing what and when. The ability Logray could provide to inspect that log information at or near real-time would be immensely useful in helping to see what's really happening in a complex system of servers and infrastructure. You folks are to be applauded for your efforts and creativity! Nice work!!!

[dirkl]

This is very interesting. I look forward to future demos

[RichardBejtlich]

This looks interesting -- thanks for sharing.