Audience
Digital forensics investigators looking for a tool to reconstruct files, images, emails and other artifacts from captured network traffic
About NetworkMiner
NetworkMiner is a network forensics tool that extracts artifacts such as files, images, emails, and passwords from captured network traffic in PCAP files. It can also capture live network traffic by sniffing a network interface. Detailed information about each IP address in the analyzed network traffic is aggregated into a network host inventory, which can be used for passive asset discovery and to get an overview of communicating devices. NetworkMiner is primarily designed to run on Windows but can also be used on Linux. Since its first release in 2007, it has become a popular tool among incident response teams and law enforcement and is used by companies and organizations worldwide.
Other Popular Alternatives & Related Software
Paessler PRTG
Paessler PRTG is an all-inclusive monitoring software solution developed by Paessler. Equipped with an easy-to-use, intuitive interface with a cutting-edge monitoring engine, PRTG optimizes connections and workloads as well as reduces operational costs by avoiding outages while saving time and controlling service level agreements (SLAs). The solution is packed with specialized monitoring features that include flexible alerting, cluster failover solution, distributed monitoring, in-depth reporting, maps and dashboards, and more.
PRTG monitors your entire IT infrastructure. All important technologies are supported:
• SNMP: ready-to-use and custom options
• WMI and Windows Performance Counters
• SSH: for Linux/Unix and macOS systems
• Traffic analysis using flow protocols or packet sniffing
• HTTP requests
• REST APIs returning XML or JSON
• Ping, SQL, and many more
Learn more
VisualEther
VisualEther turns Wireshark packet captures (PCAP/PCAPNG) into readable sequence diagrams — and lets AI coding agents like Claude Code explain, in plain English, why a network session failed.
Wireshark shows every packet but not the conversation. VisualEther draws it directly from the capture — frame-accurate and reproducible — using 82+ built-in protocol templates spanning 5G NR, 5G core, LTE, IMS/VoLTE, SIP/RTP, BGP, OSPF, DNS, HTTP/2, HTTP/3, TLS, Kerberos, Diameter, GTP, and industrial protocols (Modbus, DNP3, EtherNet/IP).
A built-in MCP server extracts only the messages and fields that matter, so an AI agent reads kilobytes of structured data instead of megabytes of raw packets — then runs an author-debug-verify loop, citing frame numbers as evidence. Built on tshark: anything Wireshark can dissect, VisualEther can diagram.
See, Triage, Diagnose, Automate. Windows (winget), macOS (Homebrew), Linux (apt/dnf). Free Community edition; paid Professional and Server editions
Learn more
Riverbed Packet Analyzer
Riverbed Packet Analyzer accelerates real-time network packet analysis and reporting of large trace files through an intuitive graphical user interface and a broad selection of pre-defined analysis views. It enables users to quickly identify and troubleshoot complex network and application performance issues down to the bit level, with full integration with Wireshark. By simply dragging and dropping preconfigured analysis views onto a group of virtual interfaces or a packet trace file, users can see results immediately, transforming hours of work into seconds. The tool facilitates the capture and merging of multiple trace files, allowing for precise pinpointing of problems across multiple segments. Additionally, it provides the capability to zoom into a 100-microsecond view of the network to identify utilization spikes or microbursts that can saturate a gigabit network and cause significant issues.
Learn more
Sniffnet
Sniffnet is a network monitoring tool designed to help users easily keep track of their Internet traffic. Whether gathering statistics or inspecting in-depth network activities, Sniffnet provides comprehensive coverage. It emphasizes user experience, ensuring ease of use compared to other cumbersome network analyzers. Completely free and open source, Sniffnet is dual-licensed under MIT or Apache-2.0, with the full source code available on GitHub. Developed entirely in Rust, it leverages this modern programming language to build efficient and reliable software, emphasizing performance and safety. Key features include selecting a network adapter to inspect, applying filters to observed traffic, viewing overall statistics and real-time charts of Internet traffic, exporting comprehensive capture reports as PCAP files, identifying over 6,000 upper-layer services, protocols, trojans, and worms, discovering domain names and ASNs of hosts, pinpointing connections in the local network.
Learn more
Pricing
Starting Price:
$1,300 one-time payment
Free Version:
Free Version available.
Integrations
No integrations listed.
Company Information
Netresec
Founded: 2010
Sweden
www.netresec.com/
Videos and Screen Captures
Other Useful Business Software
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Product Details
Platforms Supported
Windows
Linux
Training
Documentation
Live Online
In Person
Videos
Support
Phone Support
Online
