Wireshark is a free, open-source network protocol analyzer for capturing and examining network traffic.
Alternatives to Termshark
Termshark gives you a terminal interface to tshark for inspecting pcap files and sniffing live interfaces when tshark allows it. It applies Wireshark display filters, searches packets, and can reassemble and inspect TCP and UDP flows. Its conversation view covers Ethernet, IPv4, IPv6, UDP, and TCP, and profiles can customize colors and columns. That makes it a fit for examining traffic on a remote machine without copying a capture to a desktop. You may prefer another tool…
Colasoft Capsa is a Windows network analyzer for monitoring, analyzing, and troubleshooting wired and wireless networks.
Sniffnet is a free network monitoring app for Linux, macOS, and Windows.
- 4

Arkime
Arkime is an open-source network analysis and session search tool that passively observes traffic and creates searchable session records.
Free planOpen sourceWebAPILinuxSelf-hosted7.3Free plan - 5
Avidemux
Free planOpen sourceWebLinuxmacOSWindows7.3Free plan - 6

NetworkMiner
NetworkMiner analyzes captured network traffic and can sniff live traffic, extracting artifacts such as files, images, emails and passwords from PCAP files.
Free planLinuxmacOSWindows6.9$1,300 one-time - 7

Malcolm
Malcolm is a network traffic analysis suite for security monitoring.
Free planWebAPILinuxmacOS6.3Free plan - 8
TShark
TShark is the Wireshark project's terminal-mode utility for capturing and examining network traffic.
Free planLinuxmacOSWindows6.3Free plan - 9
tcpdump
tcpdump is a free tool for network monitoring and data acquisition.
Free planLinuxmacOSWindows6.2Free plan - 10

Airtool Pi
Airtool Pi is an iPhone and iPad utility for capturing Wi-Fi packets remotely through Linux-based sensors or Linux endpoints with compatible Wi-Fi adapters.
iOSmacOS6.0$14.99 one-time - 11
PCAPdroid
PCAPdroid is an open-source Android app for capturing and inspecting network traffic without root privileges.
Free planAndroid6.0Free plan - 12
Omnipeek
Omnipeek is LiveAction’s Windows network protocol analyzer for examining packet data during investigations of network performance, application…
WebWindows5.9 - 13
netsniff-ng
netsniff-ng is a free, open-source Linux network analyzer and toolkit for network development, debugging, analysis, auditing, and reconnaissance.
Free planLinux5.8Free plan - 14

GL PacketScan
GL PacketScan is a network packet analyzer for capturing and examining live IPv4 and IPv6 traffic or recorded traces.
WebLinuxWindows5.7 - 15

EndaceProbe
EndaceProbe records network packets continuously, creating historical data for investigating security threats, performance problems, and outages.
WebAPILinuxSelf-hosted5.6 - 16
nChronos
nChronos is an application-centric system for capturing, storing and analyzing network traffic, designed for monitoring medium and large corporate networks.
WebLinuxSelf-hostedWindows5.5 - 17
PacketWatch
PacketWatch is network threat hunting software that uses deep packet analysis to help locate and contain threats before they trigger alerts.
WebAPISelf-hosted5.4 - 18
SentryWire
SentryWire is a packet capture appliance and network security monitoring platform for retaining and analyzing network traffic.
WebSelf-hosted5.4 - 19
EndaceVision
EndaceVision is a browser-based application for investigating security threats and network or application performance issues with historical packet data.
Web5.3 - 20
Airtool 2
macOS4.5 - 21
Observer GigaStor
Windows4.5