Hafiye is a POSIX-compliant, customizable TCP/IP packet sniffer. Instead of interpreting protocols according to the data structures supplied by the operating system, it interprets Layer II, III, and IV as well as the payload, according to the knowledge base that it constructs from the user-supplied protocol configuration files.
