A-Packets
7.5#2 in network protocol analyzersFrom $99 a yearFree planWebAPILinuxSelf-hosted
VisitA-Packets vs Arkime
What both publish
| Fact | A-Packets | Arkime |
|---|---|---|
| API | The automation API supports PCAP upload, scheduled analysis and integrations; the REST upload endpoint uses a Bearer API key. | Documented common, viewer, WISE and Cont3xt APIs are available, but the project warns that they can change. |
| Deployment | OnPrem supports Docker Compose, Kubernetes with Helm, and air-gapped deployments, with captures and reports stored in infrastructure controlled by the customer. | The installation guide covers Linux, recommends Debian or Ubuntu LTS, and also links to a container installation guide. |
| Integrations | OnPrem supports local passkey two-factor authentication, LDAP/Active Directory, SAML 2.0, OAuth through Google, Microsoft, and GitHub, and SCIM provisioning. | Arkime uses OpenSearch or Elasticsearch for indexed metadata and offers WISE threat-intelligence integration. |
| Purpose | A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics, and protocol inspection. | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. |
| Security controls | The security page states encryption in transit and at rest, access controls, firewalls and monitoring for hosted data. | Arkime supports TLS for the viewer, digest authentication, reverse-proxy authentication, OpenSearch credentials and API keys. |
| Self-hosting | OnPrem is delivered through Docker Compose, Kubernetes/Helm or a signed air-gapped bundle. | Arkime is installed as Linux packages or official containers and runs its capture and viewer services on infrastructure you operate. |
A-Packets plans
- Public analysisFree
- Starter Workspace$11.99 a month
- Starter Workspace (monthly)$11.99 a month
- Starter Pack$14.99, paid once
- Professional$24.99 a month
- Professional (monthly)$24.99 a month
Arkime plans
- ArkimeFree
Pick A-Packets if…
It suits SOC, DFIR, incident response, network security, network operations, MSSP, integration, and forensic teams analyzing packet captures. OnPrem may fit teams that need capture and report storage in customer-controlled infrastructure.
Pick Arkime if…
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.