Tracexy is a native, session-first Wireshark alternative for macOS. Instead of starting with thousands of packets, it helps you trace a network problem from the Mac app or process to a bidirectional session and the exact source frames. Capture live traffic from a chosen interface with BPF filters, or open PCAP and PCAPNG files. Process attribution is best-effort; unknown evidence stays unknown.
Narrow a noisy capture with Overview and I/O Graphs, Flow Map, protocol filters, scoped search, Session Expressions and Focus Sets. Follow a TCP conversation, inspect decoded layers, timing and raw hex, and jump from evidence-linked Findings to the cited packet. Community also supports DNS, TCP, TLS and QUIC observations, cleartext HTTP/2 and WebSocket evidence, RTP/SIP call analysis, and bounded extraction of supported SMB2 objects.
Keep investigations separate in Projects with workspace tabs, a capture Library and local summary History. Export a raw PCAP/PCAPNG capture or a protected session when you choose to share evidence. A bundled read-only MCP server can expose bounded History from one explicitly granted Project, while the local AI Assistant shows the selected-session evidence brief for review before sending it to a local model. Packet data stays on your Mac by default.
The free Community edition covers the core capture and investigation workflow. Optional Pro adds capture comparison, cross-capture History search, batch analysis, scheduled capture, custom finding rules, advanced I/O graphs, reusable redaction profiles, HTML/PDF reports, a TLS key-log launcher and larger Project capacity. Public source is AGPL-3.0-or-later; official binaries may carry separate terms. Requires macOS 14 or later.
No comments or reviews, maybe you want to be first?