Packet Sniffers

Foremost network protocol analyzer with multi-platform support, deep protocol inspection, VoIP analysis, and extensive file format compatibility.

tcpdump is a common packet analyzer that runs under the command line. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached.

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic.

Streamline network analysis with a secure solution for efficient packet capture. Ideal for operators and IT teams, use on-premise or in cloud.

WinPcap is the first successful port of libpcap (originally developed for Unix-like operating systems) for Windows.

Microsoft Network Monitor is a packet analyzer. It enables capturing, viewing, and analyzing network data and deciphering network protocols. It can be used to troubleshoot network problems and applications on the network.

Intercepter-NG is a multifunctional network toolkit for various types of IT specialists.

NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can parse PCAP files and regenerate/reassemble transmitted files and certificates from PCAP files with HTTP, FTP, SMB, SMB2, TFTP and several other protocols.

Npcap is a packet capture (and sending) library for Windows by the Nmap Project. It implements the open Pcap API using a custom Windows kernel driver alongside our Windows build of the excellent libpcap library.

SmartSniff is a packet sniffer that capture TCP/IP packets and display them as sequence of conversations between clients and servers. You can view the TCP/IP conversations in Ascii mode (for text-based protocols, like HTTP, SMTP, POP3 and FTP) or as hex dump (for non-text base...

PCAPdroid is an android app to capture the phone traffic and analyze it remotely (e.g. via Wireshark). The traffic can be easily downloaded from a remote device thanks to the integrated HTTP server, or streamed to a remote UDP receiver.

Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.

ReqRes is an open-source, high-performance, modern native web debugging proxy for macOS. It lets you capture, inspect, modify, and intercept HTTP(S) traffic in real time.

HTTP Debugger Pro - A Professional HTTP Sniffer and Analyzer for Developers.

Scapy is a powerful interactive packet manipulation program. It is able to forge or decode packets of a wide number of protocols, send them on the wire, capture them, match requests and replies, and much more.