
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit

| Fact | Arkime | NetworkMiner |
|---|---|---|
| Founded | 2012 | 2010 |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | NetworkMiner extracts artifacts such as files, images, emails and passwords from captured network traffic in PCAP files and can sniff live network traffic. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
NetworkMiner suits incident response teams, law enforcement, companies and organizations that need to inspect captured or live network traffic. The free edition is for Windows and Linux users who do not need PcapNG parsing.