

NetworkMiner
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can extract transmitted files and certificates from PCAP files containing HTTP, FTP, SMB, SMB2, TFTP and several other protocols.
Features
- Ad-free
- Portable
- Works Offline
- No registration required
NetworkMiner News & Activities
Recent activities
POX added NetworkMiner as alternative to Edgeshark- POX added NetworkMiner as alternative to Timesketch
eladlad added NetworkMiner as alternative to Red Hand Analyzer- POX added NetworkMiner as alternative to Packémon
NetworkMiner information
What is NetworkMiner?
NetworkMiner is an open source network forensics tool that extracts artifacts, such as files, images, emails and passwords, from captured network traffic in PCAP files. NetworkMiner can also be used to capture live network traffic by sniffing a network interface. Detailed information about each IP address in the analyzed network traffic is aggregated to a network host inventory, which can be used for passive asset discovery as well as to get an overview of which devices that are communicating. NetworkMiner is primarily designed to run in Windows, but can also be used in Linux.







