From [stratoshark_main.cpp](https://gitlab.com/wireshark/wireshark/-/blob/master/ui/stratoshark/stratoshark_main.cpp):
`Stratoshark - System call and event log analyzer`
~~Logwolf~~
~~Logray~~
Stratoshark ([17688: Start renaming Logray to Stratoshark](https://gitlab.com/wireshark/wireshark/-/merge_requests/17688))
> Gerald Combs
@geraldcombs
· 3 weeks ago
Author
Owner
>One of the items on my to-do list for officially launching Logray is to change its name to Stratoshark.
>There are several reasons for changing the name:
- "Log" is misleading. The application handles system calls and logs, and the analysis UI options currently focus on syscalls.
- The "shark" brand is very strong.
- The name is much more consistent: Wireshark lives in your wires. Stratoshark lives in your cloud.
- As much as I like the name Logray, I'm not really thrilled about the prospect of repeatedly explaining that "No, it's not named after the Ewok, rays are cartilaginous cousins of sharks. Isn't that cool? Why are your eyes glazing over?" for the next N years.
Stratoshark is a sibling application for Wireshark which lets you analyze system calls and log messages.
It helps people understand, troubleshoot, and secure their systems via system calls and log messages similar to the way Wireshark helps people understand, troubleshoot, and secure their networks via packets.
Ecosystem Expansion (What is Stratoshark?) - [SharkFest’24 EUROPE Retrospective](https://sharkfest.wireshark.org/retrospective/sfeu/sf24eu/)
Stratoshark captures and analyzes system calls and logs using [libsinsp and libscap](https://github.com/falcosecurity/libs/), and can share capture files with the [Sysdig](https://github.com/draios/sysdig) command line tool and [Falco](https://github.com/falcosecurity/falco/):
You can get Windows and macOS development packages from https://www.wireshark.org/download/automated/.
Native system call captures aren't yet supported on those platforms, but they do come with the [Falco CloudTrail plugin](https://github.com/falcosecurity/plugins/blob/main/plugins/cloudtrail/README.md), which can pull AWS CloudTrail logs from an S3 bucket or SQS/SNS.
If you wish to use Stratoshark on Linux you will have to built it yourself.
Instructions for doing that can be found in the [Stratoshark Quick Start](https://gitlab.com/wireshark/wireshark/-/blob/master/doc/stratoshark-quick-start.adoc#user-content-building-stratoshark) guide.
