
Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
Visit
| Fact | Arkime | Termshark |
|---|---|---|
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | Termshark is a terminal user interface for tshark, inspired by Wireshark. |
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
Termshark suits people who need to examine packet captures or live traffic from a terminal, especially when working on a remote machine. It requires comfort with installing and using tshark.