Arkime
7.3#1 in digital forensics softwareFree planFree planWebAPILinuxSelf-hosted
VisitArkime vs TShark
What both publish
| Fact | Arkime | TShark |
|---|---|---|
| Purpose | Arkime is an open-source network analysis and session search tool that passively watches network traffic and creates searchable session records. | TShark captures live network traffic or reads saved captures, then decodes packets for output or writes them to a file. |
Arkime plans
- ArkimeFree
TShark plans
- FreeFree
Pick Arkime if…
Arkime suits teams that need to search and inspect network sessions and can provide OpenSearch or Elasticsearch for metadata storage. It is designed for self-hosted use, with Linux installation guidance and a container guide.
Pick TShark if…
TShark suits people who want to capture or inspect network packets from a terminal, or feed packet output into another program. It is available for Linux, macOS, and Windows.