- Home
- Network Packet Analyzer Software
- CapAnalysis
CapAnalysis
What it is
CapAnalysis is a free, open-source web application for examining captured network traffic, aimed at information-security specialists and system administrators. It indexes PCAP datasets and displays TCP, UDP, and ESP flows, including geographic connection views. The viewer handles individual PCAP files or groups of files. TCP analysis reports bytes lost in each direction and total exchanged bytes while excluding retransmissions. Deep Packet Inspection identifies more than 140 protocols, allowing protocol-based filtering. Other filters cover IP address or port, destination country, data size, and date and time. An included MaxMind database identifies destination countries for IPv4 and IPv6 connections. Users can import a public PCAP by URL, including a PCAP inside a ZIP archive. Linux installation packages are listed for Debian and Ubuntu in 32-bit and 64-bit versions. After installation, the application opens in a browser at localhost:9877 or a server IP on port 9877. The demo accepts files up to 20 MB.
For and against
For
- Free and open source under GNU GPL version 2
- Deep inspection identifies more than 140 protocols
- Handles single files or PCAP file sets
- Filters include country, protocol, size, and time
- Supports Debian and Ubuntu packages
Against
- Linux packages are the listed operating systems
- Demo files are limited to 20 MB
- Demo data is deleted the next day
- Browser access uses port 9877
The verdict
CapAnalysis provides broad PCAP indexing, protocol inspection, geographic views, and filtering without a paid plan. Its documented Linux packages and browser interface make it suited to technical users managing captured traffic.
Who it suits
CapAnalysis fits students, researchers, security professionals, engineers, developers, and system administrators working with PCAP traffic on Linux.
Plans and prices
CapAnalysis
Open-source software under GNU General Public License version 2
Read 8 Oct 2026 · capanalysis.net
On the record
- Audience
- The maker lists students, researchers, hackers, engineers, and developers as potential users.capanalysis.net · read 8 Oct 2026
- Browser access
- After installation, the guide says to access the application in a browser at localhost:9877 or the server's IP address on port 9877.capanalysis.net · read 8 Oct 2026
- Demo limit
- A maker post says the demo accepts PCAP files up to 20 MB and automatically deletes dataset data at 00:00 UTC on the day after creation.capanalysis.net · read 8 Oct 2026
- Filtering
- Filters include IP or port, country, data size, protocol, and date and time.capanalysis.net · read 8 Oct 2026
- GeoIP
- It identifies the destination country for connections using an included MaxMind database for IPv4 and IPv6.capanalysis.net · read 8 Oct 2026
- Import from URL
- A 2016 maker post says users can import a publicly available PCAP by URL, including a PCAP inside a ZIP archive.capanalysis.net · read 8 Oct 2026
- Linux distributions
- The maker's installation guide lists Debian and Ubuntu in 32-bit and 64-bit packages.capanalysis.net · read 8 Oct 2026
- Multiple files
- The web PCAP viewer can manage sets of PCAP files as well as individual files.capanalysis.net · read 8 Oct 2026
- PCAP indexing
- It indexes PCAP datasets and presents TCP, UDP, and ESP streams or flows, including geographic representations of connections.capanalysis.net · read 8 Oct 2026
- Protocol inspection
- Deep Packet Inspection identifies more than 140 protocols, enabling flows to be filtered by protocol.capanalysis.net · read 8 Oct 2026
- Purpose
- CapAnalysis is a web visual tool for analyzing large amounts of captured network traffic, aimed at information security specialists and system administrators.capanalysis.net · read 8 Oct 2026
- Support
- The maker invites users to contact them by form with project questions or other inquiries.capanalysis.net · read 8 Oct 2026
- TCP reassembly
- For TCP flows, it can report bytes lost in each direction and total bytes exchanged while excluding retransmitted packets.capanalysis.net · read 8 Oct 2026
