Try Documentalist, my app that offers fast, offline access to 190+ programmer API docs.
- https://github.com/mfontanini/libtins - cross-platform, C++, depends on libpcap
- http://average-coder.blogspot.com/2013/10/creating-simple-packet-sniffer-in-c.html
- https://github.com/google/gopacket/
- can capture on linux/mac, write to .pcap file, read from .pcap file, has helpers for re-assembling tcp streams
- https://github.com/akrennmair/gopca (newer fork: https://github.com/miekg/pcap)
- http://www.devdungeon.com/content/packet-capture-injection-and-analysis-gopacket
- https://github.com/zond/qisniff/blob/master/qilib/qilib.go : tcp reassembly, based on gopocket
- https://github.com/ga0/netgraph
- simple web-based gui for browsing http streams inside .pcap files (or from live capture). Has code to re-assemble http streams