
Glean Packets
Glean Packets is a paid, self-hosted web PCAP analyzer from Glean Co.
What Glean Packets is
Glean Packets is a paid, self-hosted web PCAP analyzer from Glean Co. that keeps capture data on your own server while you inspect it in a browser. It accepts .pcap, .pcapng, and .gz files, parses them in parallel, and indexes them in SQLite. Protocol decoding covers Ethernet, IP, TCP, UDP, ICMP, and DNS, with a hex viewer for packet contents. DNS searches can use names, IP addresses, or record types and link queries with answers. Flow views show top flows, latency distribution, and packets-per-second charts. You can filter packets by protocol for .pcap.gz export or begin live capture in the browser. Remote capture works across nodes, with PCAP merging and unified cluster access without a single point of failure. Optional Glean Agent searches and summarizes captures through a self-hosted or customer-provided LLM endpoint; a GPU is recommended. Signature detection accepts YAML rules and regex, with severity and confidence scores from 0 to 100. The interface supports English and Japanese desktop or mobile browsers.
Good
- Supports PCAP, PCAPNG, and GZ files
- Parallel parsing and SQLite indexing
- Remote capture and multi-node PCAP merging
- DNS, flow, and protocol analysis tools
- No cloud dependency or telemetry stated
Watch out
- Pricing is available only on request
- Optional AI recommends a GPU
- Deployment requires your own server
- TLS uses a reverse proxy
Who it suits
Glean Packets suits teams handling network troubleshooting, DNS analysis, forensics, product testing, or distributed-site monitoring. It is intended for organizations wanting on-premises or air-gapped deployment with browser access.
Verdict
Glean Packets combines browser-based packet inspection with multi-node capture, flow analysis, DNS tools, and configurable detection. Its self-hosted design fits teams that must keep captures on their own infrastructure.
Plans and prices
From Glean Packets's own pricing page, checked 10 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Pricing not listed | Priced on request | Pricing not stated on the product page; demo by request |
The facts
Each one read from Glean Packets's own pages, with the date it was checked.
What it does
- Authentication and transport
- The listed authentication is JWT for admin and user roles with Argon2 hashing, and deployment uses TLS via a reverse proxy.checked 10 Oct 2026
- Capture and export
- Users can filter packets by protocol for .pcap.gz export and start live packet capture from the browser.checked 10 Oct 2026
- DNS and flow tools
- DNS analysis can search by name, IP, or type and correlate queries with answers; flow analysis includes top flows, latency distribution, and packets-per-second charts.checked 10 Oct 2026
- File formats
- It supports .pcap, .pcapng, and .gz files.checked 10 Oct 2026
- Intended use
- The maker lists product testing, network troubleshooting, DNS analysis, network forensics, and distributed-site monitoring as use cases.checked 10 Oct 2026
- Multi-node access
- The product supports remote capture on any node, merging PCAPs across nodes, and unified cluster access without a single point of failure.checked 10 Oct 2026
- Optional AI
- The optional Glean Agent searches and summarizes captures in plain language and connects to a self-hosted or customer-provided LLM endpoint; a GPU is recommended.checked 10 Oct 2026
- Parsing and indexing
- It parallel-parses capture files and automatically indexes them into SQLite.checked 10 Oct 2026
- Privacy and deployment
- The maker says data stays inside the user's own server with no cloud dependency or telemetry, including in on-premises and air-gapped environments.checked 10 Oct 2026
- Protocol analysis
- It decodes Ethernet, IP, TCP, UDP, ICMP, and DNS, and includes a hex viewer.checked 10 Oct 2026
- Purpose
- Glean Packets is a self-hosted web PCAP analyzer that lets users inspect captures in a browser while keeping data on their own server.checked 10 Oct 2026
- Requirements and interface
- The maker says it runs on commodity hardware, requires no installation, and has an English/Japanese interface for desktop and mobile browsers.checked 10 Oct 2026
- Support
- Glean Co. says it provides product evaluation, localization, technical support, and training in-house.checked 10 Oct 2026
- Threat detection
- Signature-based detection supports user-defined YAML rules and regex, severity and confidence scoring from 0 to 100, and application-layer traits including HTTP fields and SSL/SNI parsing.checked 10 Oct 2026
The company
- Headquarters
- Tokyo, Japanchecked 28 Sep 2026
Alternatives to Glean Packets
- 1
Fing Security
Free planAndroidiOSWebAPI8.2From $79.99 a year - 2

PingPlotter
Free planiOSWebAPILinux8.2From $6.99 a month - 3
Wireshark
Free planOpen sourceAPILinuxmacOSSelf-hosted7.5Free plan - 4
Colasoft Capsa
Free planWindows7.4$295 one-time - 5
Nmap
Free planLinuxmacOSSelf-hostedWindows7.0From $9,980 a month - 6

CommView
Windows6.4From $149 a year
