17.5
Wireshark is a free, open-source network protocol analyzer for capturing and examining network traffic.
Free planOpen sourceAPILinuxmacOS
Alternatives to Malcolm
Malcolm combines packet analysis with network security monitoring. It accepts PCAP files, Zeek logs, and Suricata alerts through a browser, as well as live traffic forwarded by lightweight sensors. OpenSearch Dashboards provides visualizations, while Arkime supports searching and identifying sessions. Malcolm also enriches session data with GeoIP, hardware manufacturer lookups, asset mappings, and JA4 fingerprints. It is free and supports Linux, macOS, Windows, web browsers,…
27.4
Colasoft Capsa is a Windows network analyzer for monitoring, analyzing, and troubleshooting wired and wireless networks.
Free planWindows
37.4
Sniffnet is a free network monitoring app for Linux, macOS, and Windows.
Free planOpen sourceLinuxmacOSWindows
- 4
Arkime
Arkime is an open-source network analysis and session search tool that passively observes traffic and creates searchable session records.
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 5
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan - 6
NetworkMiner
NetworkMiner analyzes captured network traffic and can sniff live traffic, extracting artifacts such as files, images, emails and passwords from PCAP files.
Free planLinuxmacOSWindows6.9$1,300 one-time - 7
Termshark
Termshark is a terminal interface for tshark, inspired by Wireshark, for examining packet captures and live traffic.
Free planAndroidLinuxmacOSWindows6.8Free plan - 8
TShark
TShark is the Wireshark project's terminal-mode utility for capturing and examining network traffic.
Free planLinuxmacOSWindows6.3Free plan - 9
tcpdump
tcpdump is a free tool for network monitoring and data acquisition.
Free planLinuxmacOSWindows6.2Free plan - 10
Airtool Pi
Airtool Pi is an iPhone and iPad utility for capturing Wi-Fi packets remotely through Linux-based sensors or Linux endpoints with compatible Wi-Fi adapters.
iOSmacOS6.0$14.99 one-time - 11
PCAPdroid
PCAPdroid is an open-source Android app for capturing and inspecting network traffic without root privileges.
Free planAndroid6.0Free plan - 12
Omnipeek
Omnipeek is LiveAction’s Windows network protocol analyzer for examining packet data during investigations of network performance, application…
WebWindows5.9 - 13
netsniff-ng
netsniff-ng is a free, open-source Linux network analyzer and toolkit for network development, debugging, analysis, auditing, and reconnaissance.
Free planLinux5.8Free plan - 14
GL PacketScan
GL PacketScan is a network packet analyzer for capturing and examining live IPv4 and IPv6 traffic or recorded traces.
WebLinuxWindows5.7 - 15
EndaceProbe
EndaceProbe records network packets continuously, creating historical data for investigating security threats, performance problems, and outages.
WebAPILinuxSelf-hosted5.6 - 16
nChronos
nChronos is an application-centric system for capturing, storing and analyzing network traffic, designed for monitoring medium and large corporate networks.
WebLinuxSelf-hostedWindows5.5 - 17
PacketWatch
PacketWatch is network threat hunting software that uses deep packet analysis to help locate and contain threats before they trigger alerts.
WebAPISelf-hosted5.4 - 18
SentryWire
SentryWire is a packet capture appliance and network security monitoring platform for retaining and analyzing network traffic.
WebSelf-hosted5.4 - 19
EndaceVision
EndaceVision is a browser-based application for investigating security threats and network or application performance issues with historical packet data.
Web5.3 - 20
Airtool 2
macOS4.5 - 21
Observer GigaStor
Windows4.5