Libpcap is probably the biggest issue, it’s pretty large in our world.

I had a quick look through tcpkit, it seems to make some odd decisions. For example latency stats is done in C. Why isn’t this a generic Lua plugin? I want latency, but the buckets are all wrong in my world, my latency starts at 300ms, and increases. Why isn’t this in Lua and easily tweakable.

Plus, is I can do latency stats then I can start doing some really interesting things I care about. For example bandwidth use, average packet size, etc etc.

(Oh, and why Lua 5.2? 5.3 has ints, which is nice when dealing with numbers)

It seems like wireshark doesn't directly have filters for latency. I end up adding the column when in the gui version of wireshark but this is a pretty nice cli version.