If you use VM's for this sort of thing, having images laying around like: https://security-onion-solutions.github.io/security-onion/ https://security-onion-solu

If you use VM's for this sort of thing, having images laying around like: https://security-onion-solutions.github.io/security-onion/ https://security-onion-solutions.github.io/security-onion/ gives you most of the tools you'd need (wireshark, scapy, etc. in one place). Seems to be the best way to go for me (Mac laptop user).