tcpdump is a common packet analyzer that runs under the command line. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached.



There are many alternatives to Wireshark for Windows if you are looking for a replacement. The best Windows alternative is tcpdump, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 50 alternatives to Wireshark and many of them are available for Windows so hopefully you can find a suitable replacement. Other interesting Windows alternatives to Wireshark are Intercepter-NG, NetworkMiner, Proxyman and Ettercap.
tcpdump is a common packet analyzer that runs under the command line. It allows the user to intercept and display TCP/IP and other packets being transmitted or received over a network to which the computer is attached.



Intercepter-NG is a multifunctional network toolkit for various types of IT specialists.



NetworkMiner is a Network Forensic Analysis Tool (NFAT) for Windows. NetworkMiner can extract transmitted files and certificates from PCAP files containing HTTP, FTP, SMB, SMB2, TFTP and several other protocols.




Proxyman is a high-performance macOS app, which enables developers to view HTTP/HTTPS requests from apps and domains. Available on macOS, iOS, Windows & Linux.




Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks.

Capsa performs real-time packet capturing, 24/7 network monitoring, protocol analysis, in-depth packet decoding, and automatic expert diagnosis.


MicroOLAP TCPDUMP is a clone of tcpdump , the most used network sniffer/analyzer for UNIX, compiled with the original tcpdump code (http://www.tcpdump.org/), and MicroOLAP Packet Sniffer SDK.

Sysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce.

Mojo Packets™ is web based tool that simplifies trace based analysis and troubleshooting of connectivity/performance issues observed in Wi-Fi (IEEE 802.11) environments.




It's open source and use CLI