Arkime
Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.
Cost / License
- Free
- Open Source
Application types
Platforms
- Linux
- Self-Hosted
Features
- Network Scanner
Tags
- Packet Sniffer
- network-visualization
Arkime News & Activities
Recent activities
Arkime information
Developed by
UnknownLicensing
Open Source (Apache-2.0) and Free product.Written in
Alternatives
8 alternatives listedSupported Languages
- English
AlternativeTo Category
Network & AdminGitHub repository
- 7,243 Stars
- 1,131 Forks
- 52 Open Issues
- Updated
What is Arkime?
Moloch augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting. Moloch exposes APIs which allow for PCAP data and JSON formatted session data to be downloaded and consumed directly. Moloch stores and exports all packets in standard PCAP format, allowing you to also use your favorite PCAP ingesting tools, such as wireshark, during your analysis workflow.
Moloch is built to be deployed across many systems and can scale to handle tens of gigabits/sec of traffic. PCAP retention is based on available sensor disk space. Metadata retention is based on the Elasticsearch cluster scale. Both can be increased at anytime and are under your complete control.