NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can parse PCAP files and regenerate/reassemble transmitted files and certificates from PCAP files with HTTP, FTP, SMB, SMB2, TFTP and several other protocols.




The best alternative to Wireshark is NetworkMiner, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 50 alternatives to Wireshark and six of them are so hopefully you can find a suitable replacement. Other interesting alternatives to Wireshark are PCAPdroid, Nethogs, RawCap and G-Earth.
NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can parse PCAP files and regenerate/reassemble transmitted files and certificates from PCAP files with HTTP, FTP, SMB, SMB2, TFTP and several other protocols.




PCAPdroid is an android app to capture the phone traffic and analyze it remotely (e.g. via Wireshark). The traffic can be easily downloaded from a remote device thanks to the integrated HTTP server, or streamed to a remote UDP receiver.



NetHogs is a small 'net top' tool. Instead of breaking the traffic down per protocol or per subnet, like most tools do, it groups bandwidth by process.



Discover and capture container network traffic from your comfy desktop Wireshark, using a containerized service and a Wireshark plugin.


Edgeshark is the most popular Self-Hosted alternative to Wireshark.