A-Packets
7.5#2 in network protocol analyzersFrom $99 a yearFree planWebAPILinuxSelf-hosted
VisitA-Packets vs Malcolm
What both publish
| Fact | A-Packets | Malcolm |
|---|---|---|
| API | The automation API supports PCAP upload, scheduled analysis and integrations; the REST upload endpoint uses a Bearer API key. | Malcolm provides a REST API and forwards requests to Logstash, OpenSearch, NetBox and Arkime APIs. |
| Deployment | OnPrem supports Docker Compose, Kubernetes with Helm, and air-gapped deployments, with captures and reports stored in infrastructure controlled by the customer. | Malcolm runs as isolated software containers and can be deployed with Docker, Podman or Kubernetes, including AWS Kubernetes deployments. |
| Integrations | OnPrem supports local passkey two-factor authentication, LDAP/Active Directory, SAML 2.0, OAuth through Google, Microsoft, and GitHub, and SCIM provisioning. | Components include NetBox for asset-inventory enrichment, Keycloak for identity and access management, and nginx-auth-ldap for LDAP authentication. |
| Purpose | A-Packets analyzes PCAP and PCAPNG captures for incident response, forensics, and protocol inspection. | Malcolm is an easily deployable network traffic analysis tool suite for security monitoring. |
A-Packets plans
- Public analysisFree
- Starter Workspace$11.99 a month
- Starter Workspace (monthly)$11.99 a month
- Starter Pack$14.99, paid once
- Professional$24.99 a month
- Professional (monthly)$24.99 a month
Malcolm plans
No prices published.
Pick A-Packets if…
It suits SOC, DFIR, incident response, network security, network operations, MSSP, integration, and forensic teams analyzing packet captures. OnPrem may fit teams that need capture and report storage in customer-controlled infrastructure.
Pick Malcolm if…
Malcolm suits security operations centers, smaller networks, home environments, and field incident-response engagements. It is aimed at users who can deploy and operate a container-based network analysis system.