PAGES
← all tools
◆ Network Analysis & Monitoring

Wireblast

v0.6.1 open-source

Wireblast is an AF_XDPAF_XDPA Linux kernel interface that hands raw packets to a userspace program straight off the network card, skipping the kernel's networking stack. It is how userspace tools reach line rate on 100G links. traffic generator for measuring and replaying high-rate Linux network traffic.

Summary

Wireblast is an open-source AF_XDP traffic generator for Linux, released under Apache-2.0, built for the point where iperf stops being enough and you need real Ethernet frames at a specific size, thousands of distinct flows, or a captured trace replayed onto the wire. It runs as a single static Go binary with no cgo, libpcap, DPDK, or kernel modules, and you drive it from the command line either through an interactive wizard and live dashboard or, with --no-tui and scriptable flags, in CI and unattended soak tests. It targets network and performance engineers who need to generate or receive traffic patterns—UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery., TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. SYN, IMIX, raw Ethernet, VLAN-tagged, PCAPPCAPA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. replay—rather than security analysts, and its own README positions it as "the iPerf of packet generators." On a 100G Mellanox NICNICA network interface card or adapter, the hardware that connects a computer to a network. It sends and receives packets over the link. it reaches line rate at every frame size, including 138 million packets per second of minimum-size frames from a single process.

Wireblast is an AF_XDP traffic generator for measuring and replaying high-rate Linux network traffic.

How Wireblast helps

Can this switch actually hold line rate at the frame size my application uses?

drives a real NIC at a chosen packet size and rate and reports the delivered throughput and packet rate, so a claimed line-rate port can be checked frame-size by frame-size rather than assumed

How does this device behave under a realistic internet-like traffic mix rather than one flow of identical packets?

generates IMIX traffic in the standard 7:4:1 size ratio alongside single-pattern UDP or TCP SYN, so a device gets exercised the way production traffic actually shapes it

Does this path forward thousands of simultaneous flows the way my production traffic does, or does it collapse them onto one path?

cycles destinations across a CIDR block and generates up to thousands of distinct flows, then the receive side or downstream ECMP/LAG/RSS hashing shows whether they actually spread out

What does this link or device do when I put yesterday's captured traffic back on the wire?

replays a saved trace file at a controlled rate and reports what went out, turning a one-off capture into a repeatable load test

Is a shared NIC actually receiving everything I think it is, without breaking the connection I'm running it over?

counts arriving packets in a receive mode that can filter to keep the management session intact, and warns if the receive side is bound to fewer queues than the card has so traffic wouldn't be silently missed

Can I fold a traffic-generation check into a CI pipeline or an unattended soak test instead of running it by hand?

runs the same patterns and rates through a plain-text, wizard-free mode that exits with results, so a scripted run produces the same numbers a person watching the dashboard would see

all 15 features, with the evidence for each →

Languages

Not documented

Features

15 capabilities across 4 capability groups · 1 backed by code, an API document or a real run

Built from Wireblast's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

  • Wireblast covers 3 of the 34 network analysis capabilities we track.
  • Wireblast covers 1 of the 5 network observation capabilities we track.

What Wireblast offers you

  • Command-line interface4
  • Agentless deployment1
  • CI/CD pipeline integration1
Packet crafting and generation 6 features Network analysis since 2026
AF_XDP packet transmission shipped Sends packets at up to 100G line rate using AF_XDP, requiring no external libraries or kernel modules. 2 releases · 1 other source · first seen Aug 2026

Shared capability: Packet crafting and generation

Also counts toward: Agentless deployment

release

  • Delivers measured 100G line-rate performance at all frame sizes, including 138 million packets per second for minimum-size frames, from a single process. v0.1.0 · Aug 2026 · source · release history
  • New AF_XDP traffic generator for Linux using a single static Go binary — no cgo, no libpcap, no DPDK, no kernel modules. v0.1.0 · Aug 2026 · source · release history

docs

  • AF_XDP-based Linux traffic generator that sends real Ethernet frames at line rate using a single static Go binary.
ENA (AWS) zero-copy support shipped Uses page-sized memory frames so AF_XDP zero-copy mode works correctly on AWS ENA-backed instances. 1 release · 1 other source · first seen Aug 2026

Shared capability: Packet crafting and generation

release

  • Uses page-sized UMEM frames on ENA (AWS Elastic Network Adapter) NICs so that AF_XDP zero-copy mode works on ENA-backed instances. v0.2.3 · Aug 2026 · source · release history

docs

  • AF_XDP-based Linux traffic generator that sends real Ethernet frames at line rate using a single static Go binary.
IPv6 traffic generation shipped Sends traffic across IPv6 destinations to stress-test dual-stack and IPv6-only network paths. 1 release · 1 other source · first seen Aug 2026

Shared capability: Packet crafting and generation

release

  • Adds IPv6 support, enabling UDP blasts and multi-flow generation across IPv6 destinations (see 022-ipv6-udp and 023-ipv6-flows examples). v0.2.0 · Aug 2026 · source · release history

example

  • Blast UDP traffic to an IPv6 destination to stress-test a dual-stack path or IPv6-only segment. sudo wireblast -i eth1 --dst-ip 2001:db8::1 --packet-size 512 --pps 1M -d 30s v0.2.0 · Aug 2026 · source
Traffic pattern support shipped Supports UDP, TCP SYN, IMIX, raw Ethernet, and PCAP replay so users can match traffic to their test scenario. 1 release · 1 other source · first seen Aug 2026

Shared capability: Packet crafting and generation

release

  • Supports multiple traffic patterns: UDP, TCP SYN, IMIX (7:4:1 internet mix), raw Ethernet, and PCAP replay (.pcap / .pcapng). v0.1.0 · Aug 2026 · source · release history

example

  • Replay a captured trace at a controlled rate to stress-test a device with real-world traffic mix. cd examples/015-pcap-replay && IFACE=eth1 DST=192.0.2.10 ./run.sh v0.1.0 · Aug 2026 · source
Scriptable CLI flags shipped Exposes command-line flags for every major parameter so Wireblast can be run fully unattended from scripts or CI jobs. 1 release · first seen Aug 2026

Shared capability: Packet crafting and generation

Also counts toward: CI/CD pipeline integration, Command-line interface

release

  • Adds -i, --dst-ip, --packet-size, --pps, -d, -y, and --no-tui flags for fully scriptable, wizard-free packet generation. v0.1.0 · Aug 2026 · source · release history
VLAN tagging and multi-flow generation shipped Generates VLAN-tagged frames and cycles through destination address ranges to produce thousands of distinct flows for load-balancing and hashing tests. 1 release · first seen Aug 2026

Shared capability: Packet crafting and generation

release

  • Supports VLAN-tagged (802.1Q) frame generation, CIDR destination cycling, multi-flow generation (up to thousands of distinct flows), and ECMP/LAG/RSS flow hashing. v0.1.0 · Aug 2026 · source · release history
Packet capture (live and offline) 3 features Network analysis since 2026
AF_XDP packet reception and counting shipped Receives and counts packets on a test interface using AF_XDP without touching the host's normal network stack. 3 releases · 1 other source · first seen Aug 2026

Shared capability: Packet capture (live and offline)

Also counts toward: Command-line interface

release

  • Refuses an AF_XDP receive when the kernel's VLAN filter would silently drop the traffic, preventing silent data loss. v0.6.1 · Aug 2026 · source · release history
  • Warns when an AF_XDP receive binds fewer queues than the card has, alerting users to potential missed traffic. v0.6.1 · Aug 2026 · source · release history
  • Supports --mode receive with --rx-mode (e.g. udp-port) and --rx-port flags for AF_XDP-based packet reception and counting. v0.1.0 · Aug 2026 · source · release history

example

  • Count arriving packets on a test interface without disturbing the kernel stack — run this in a second window while a sender blasts. sudo wireblast -i eth1 --mode receive --rx-mode udp-port --rx-port 9000 -d 60s v0.1.0 · Aug 2026 · source
Mellanox mlx5 Direct Verbs backend shipped Enables packet transmission and receive modes on Mellanox mlx5 NICs using the Direct Verbs backend. 2 releases · 1 other source · first seen Aug 2026

Shared capability: Packet capture (live and offline)

Also counts toward: Command-line interface

release

  • Adds mlx5 Direct Verbs backend to wireblast v0.6.1 · Aug 2026 · source · release history
  • Adds the mlx5 Direct Verbs backend, enabling --rx-mode on Mellanox mlx5 NICs directly through the new backend. v0.6.1 · Aug 2026 · source · release history

example

  • Use receive mode on an mlx5 Mellanox NIC now that the Direct Verbs backend supports --rx-mode. sudo wireblast -i eth1 --mode receive --rx-mode udp-port --rx-port 9000 -d 60s v0.6.1 · Aug 2026 · source
Shared-NIC receive without management disruption shipped Captures traffic on a shared NIC while keeping an active management session alive so the user is not disconnected. 1 release · 1 other source · first seen Aug 2026

Shared capability: Packet capture (live and offline)

Also counts toward: Command-line interface

release

  • Adds --rx-mode keep-management receive mode, allowing broad packet capture on a shared NIC without disrupting the management connection. v0.2.0 · Aug 2026 · source · release history

example

  • Receive all traffic on a shared NIC without dropping the management session, using the new keep-management filter. sudo wireblast -i eth1 --mode receive --rx-mode keep-management -d 60s v0.2.0 · Aug 2026 · source
Traffic statistics 1 feature Network analysis since 2026
Counter reset shipped Resets all drop, error, and rate counters in one action so the user can take a clean measurement mid-session. 1 release · first seen Aug 2026

Shared capability: Traffic statistics

release

  • Reset action now clears drop and error counters alongside rate counters. v0.2.1 · Aug 2026 · source · release history
Packet replay 1 feature Network observation since 2026
Bundled example scripts shipped Ships 23 runnable example scripts covering common test scenarios including benchmarking, PCAP replay, VLAN, IPv6, and soak tests. 1 release · 1 other source · first seen Aug 2026

Shared capability: Packet replay

release

  • Ships 23 runnable example scripts in examples/ covering benchmarking, IMIX, PCAP replay, VLAN tagging, IPv6, receive mode, and unattended soak tests. v0.1.0 · Aug 2026 · source · release history

example

  • Run bundled example script IFACE=eth1 DST=192.0.2.10 ./run.sh
Other / not yet classified 4 features Features we have not matched to a capability yet. A suggested match is marked.
Configurable PCAP memory budget verified suggested Lets the user set how much memory Wireblast may use when loading PCAP files into memory. 2 releases · 2 other sources · first seen Aug 2026

Suggested capability: Packet capture (live and offline). This is our guess, not confirmed.

release

  • Adds --pcap-memory CLI argument to make the pcap load memory budget configurable v0.4.0 · Aug 2026 · source · release history
  • Adds --pcap-memory flag to make the memory budget for loading PCAP files configurable at runtime. v0.4.0 · Aug 2026 · source · release history

command line

example

  • Increase memory budget when loading large PCAP files that previously failed due to memory constraints. wireblast --pcap-memory 2g input.pcap v0.4.0 · Aug 2026 · source
Interactive TUI wizard and live dashboard shipped suggested Provides an interactive setup wizard and a live dashboard for guided, real-time monitoring during a test run. 1 release · 1 other source · first seen Aug 2026

Suggested capability: Packet crafting and generation. This is our guess, not confirmed.

release

  • Includes an interactive TUI wizard and live dashboard (Bubble Tea) for guided setup, alongside a --no-tui plain-text mode for CI and scripting. v0.1.0 · Aug 2026 · source · release history

example

  • Blast 512-byte UDP packets at 1 Mpps for 30 seconds in CI — no wizard, no dashboard, exits with plain-text results. sudo wireblast --no-tui -i eth1 --dst-ip 192.0.2.10 --packet-size 512 --pps 1M -d 30s -y v0.1.0 · Aug 2026 · source
Dashboard noise reduction shipped suggested Hides verbose per-queue drop lines from the dashboard by default to keep the display readable. 1 release · first seen Aug 2026

Suggested capability: Display filtering. This is our guess, not confirmed.

release

  • Per-queue drop lines are hidden by default in the live dashboard to reduce noise. v0.2.1 · Aug 2026 · source · release history
Persistent settings shipped Saves the last-used configuration so repeated runs reuse previous settings automatically. 1 release · first seen Aug 2026

release

  • Remembers last-run settings under ~/.wireblast/ via internal/prefs for repeated use. v0.1.0 · Aug 2026 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for Wireblast, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Wireblast puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

6 entries

  1. August 20266

    6 entries

    Project health

    Issue, contributor and maintainer activity in atoonk/wireblast, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 2 +2 vs prior 12 months
    2. Maintainers 1 +1 joined · −0 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 100% of issues opened, last 12 months
    5. Median time to close < 1 day first maintainer reply 2.4 hours
    6. Open backlog 0 of 3 issues ever filed
    1. Issues opened / month 0 · 0 communitymaintainers
    2. Open backlog 0
    3. Contributors / month 0
    4. Commits / month 0
    5. Stars 116
    Issue themes, last 12 months
    • other 100%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →