One of the most popular alternatives to Wireshark is tcpdump, which is free and open source. Other popular alternatives are NetworkMiner, Proxyman, CloudShark and Ettercap. Network Analyzers like Wireshark are a crowded field, with more than 50 alternatives for Windows, Linux, Mac, Android and the web.
tcpflow, a TCP Flow Recorder, is a program that captures data transmitted as part of TCP connections (flows), and stores the data in a way that is convenient for protocol analysis or debugging. A program like 'tcpdump' shows a summary of packets seen on the wire, but...
Native Cocoa app for capturing and analyzing packets. Similar to Wireshark, but with a native interface (and less features). If you don't like the X11 GTK Wireshark, this is your app.
httpry is a tool designed for displaying and logging HTTP traffic. It is not intended to perform analysis itself, but instead to capture, parse and/or log the traffic for later analysis. It can be run in real-time displaying the live traffic on the wire, or as a daemon process...
Impacket is a collection of Python classes for working with network protocols. Impacket is focused on providing low-level programmatic access to the packets and for some protocols (e.g. SMB1-3 and MSRPC) the protocol implementation itself.
TraceWrangler is a network capture file toolkit running on Windows (or on Linux, using WINE) that supports PCAP as well as the new PCAPng file format, which is now the standard file format used by Wireshark.
Packetyzer provides a Windows user interface for the Ethereal packet capture and dissection library. Ethereal is used by network professionals around the world for troubleshooting, analysis, software and protocol development, and education.
United States
HTTP Debugger captures and decrypts HTTP/HTTPS from any Windows app without proxy setup — HTTP/2, WebSocket, SSE, gRPC and localhost included. Edit and replay requests, modify traffic on the fly, and let an AI assistant read the session over the built-in MCP server.
Complete DDoS protection and load balancing solutions to ensure optimal security for applications in virtual, cloud and software defined data centers.
Israel
Packet capture/Network traffic sniffer app with SSL decryption. Not that feature rich yet, but it's a powerful debugging tool especially when developing an app.
PlayCap plays back captures made from Wireshark, tcpdump, WinDump, or any libpcap-based application. PlayCap was originally (and still is) a part of IG Scanner by Signal 11 Software, but was spun off as a separate app and released as Open Source software.
United States
