Wireshark is a free, open-source network protocol analyzer for capturing and examining network traffic.
Alternatives to Airtool Pi
Colasoft Capsa is a Windows network analyzer for monitoring, analyzing, and troubleshooting wired and wireless networks.
Sniffnet is a free network monitoring app for Linux, macOS, and Windows.
- 4

Arkime
Arkime is an open-source network analysis and session search tool that passively observes traffic and creates searchable session records.
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 5
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan - 6

NetworkMiner
NetworkMiner analyzes captured network traffic and can sniff live traffic, extracting artifacts such as files, images, emails and passwords from PCAP files.
Free planLinuxmacOSWindows6.9$1,300 one-time - 7
Termshark
Termshark is a terminal interface for tshark, inspired by Wireshark, for examining packet captures and live traffic.
Free planAndroidLinuxmacOSWindows6.8Free plan - 8

Malcolm
Malcolm is a network traffic analysis suite for security monitoring.
Free planWebAPILinuxmacOS6.3Free plan - 9
TShark
TShark is the Wireshark project's terminal-mode utility for capturing and examining network traffic.
Free planLinuxmacOSWindows6.3Free plan - 10
tcpdump
tcpdump is a free tool for network monitoring and data acquisition.
Free planLinuxmacOSWindows6.2Free plan - 11
PCAPdroid
PCAPdroid is an open-source Android app for capturing and inspecting network traffic without root privileges.
Free planAndroid6.0Free plan - 12
Omnipeek
Omnipeek is LiveAction’s Windows network protocol analyzer for examining packet data during investigations of network performance, application…
WebWindows5.9 - 13
netsniff-ng
netsniff-ng is a free, open-source Linux network analyzer and toolkit for network development, debugging, analysis, auditing, and reconnaissance.
Free planLinux5.8Free plan - 14

GL PacketScan
GL PacketScan is a network packet analyzer for capturing and examining live IPv4 and IPv6 traffic or recorded traces.
WebLinuxWindows5.7 - 15

EndaceProbe
EndaceProbe records network packets continuously, creating historical data for investigating security threats, performance problems, and outages.
WebAPILinuxSelf-hosted5.6 - 16
nChronos
nChronos is an application-centric system for capturing, storing and analyzing network traffic, designed for monitoring medium and large corporate networks.
WebLinuxSelf-hostedWindows5.5 - 17
PacketWatch
PacketWatch is network threat hunting software that uses deep packet analysis to help locate and contain threats before they trigger alerts.
WebAPISelf-hosted5.4 - 18
SentryWire
SentryWire is a packet capture appliance and network security monitoring platform for retaining and analyzing network traffic.
WebSelf-hosted5.4 - 19
EndaceVision
EndaceVision is a browser-based application for investigating security threats and network or application performance issues with historical packet data.
Web5.3 - 20
Airtool 2
macOS4.5 - 21
Observer GigaStor
Windows4.5