It might be more useful to think of Brim in terms of "a different zoom level" than "better than". Wireshark focuses on showing as much detail as it can about ev

It might be more useful to think of Brim in terms of "a different zoom level" than "better than". Wireshark focuses on showing as much detail as it can about every packet that you see. If you have a lot of packets this will burn a corresponding amount of CPU time and memory. Brim, Packet Analyzer (mentioned in another comment), and other tools zoom out a bit and let you process a larger number of packets, but with less detail. If needed you can pass the interesting and relevant ones to Wireshark for more detailed inspection and analysis. Disclosures: Wireshark pays for my mortgage. My employer makes Packet Analyzer. I'm friends with people at Brim.