Installation
Library only
Add Nstealth as a dependency:
cargo add nstealth
CLI tool
Install the full CLI (capture, parse, JSON output):
cargo install nstealth --features full
(The package name is lowercase nstealth; the product name is Nstealth.)
Build from source with CLI
git clone https://github.com/gen0sec/nstealth
cd nstealth
cargo build --release --features full
The binary will be at target/release/nstealth.
Feature flags
| Feature | Description |
|---|---|
cli | CLI binary with JSON output |
json | JSON serialization support |
network | URL/network loading support |
capture | Live packet capture (libpcap) |
bpf | BPF data types for kernel / eBPF integration |
full | All features enabled |
For live capture you need capture (or full). For eBPF integration use the bpf feature.
Requirements
- Live capture: libpcap and appropriate permissions (e.g.
sudoorCAP_NET_RAW). - Mirrored traffic: Attach to a SPAN/mirror port or tap; no inline deployment.
Next
- CLI usage — Capture and parse commands
- Library usage — Rust API