
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit
| Fact | Arkime | PCAPdroid |
|---|---|---|
| Integrations | Arkime uses OpenSearch or Elasticsearch for indexed metadata and offers WISE threat-intelligence integration. | PCAPdroid supports real-time PCAP-over-IP analysis with tools including Wireshark, ntopng and tcpdump. |
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | PCAPdroid is an open-source network capture and monitoring tool that works without root privileges. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
PCAPdroid suits Android users who need to inspect traffic from apps on that device. It may also suit people who want to save captures for later analysis or send them to network-analysis tools.