NetworkMiner Description
NetworkMiner, an open-source tool for network forensics, extracts artifacts like files, images, emails and passwords, from captured network traffic stored in PCAP files. It can also capture real-time network traffic by sniffing the network interface. The analyzed network traffic contains detailed information about each IP. This can be used to discover passive assets and get a better overview of communicating devices. NetworkMiner was designed to run primarily on Windows, but it can also be used with Linux. Since its 2007 release, it has become a favorite tool among incident response teams, law enforcement agencies and companies and organizations around the world.
NetworkMiner Alternatives
Auvik Network Management is a network management and monitoring software designed to empower IT professionals with deep visibility, automation, and control over their network infrastructure. This innovative platform is trusted by businesses of all sizes to streamline network operations, enhance security, and optimize performance. One of Auvik's standout features is its real-time network mapping and discovery capabilities. It automatically generates interactive, visual maps of your network topology, allowing you to easily identify devices, connections, and potential bottlenecks. This invaluable insight helps in planning and optimizing network architecture for maximum efficiency.
Learn more
Elecard Boro is a professional software solution designed to monitor video stream health and track QoS/QoE parameters across distributed networks. By providing centralized access to statistics and automated reporting, Boro enables telecom professioals to build a powerful monitoring ecosystem from scratch or easily scale existing infrastructure to ensure flawless broadcast quality.
How it works:
Boro utilizes distributed software probes to monitor UDP, RTP, HTTP, HLS, DASH, SRT, and RTMP streams. By aggregating multi-point measurements on a centralized server, operators can instantly isolate quality degradation across the entire delivery chain. The platform provides network-wide visibility and real-time alerts for ETSI TR 101 290 errors via Email, SNMP, Webhook, PagerDuty, and Telegram.
Key Features:
• Rapid Deployment & Scalability: Launch a monitoring probe in just 30 minutes. Easily scale your infrastructure by adding new probes to the unified Boro ecosystem on any hardware.
• Proactive Issue Resolution: Monitor over 50 QoS and QoE parameters (including full ETSI TR 101 290 compliance) and use triggers to localize network anomalies before they impact viewers.
• Advanced Diagnostics: Use comprehensive analysis of SCTE-35 ad-insertion cues and PCAP stream recording for in-depth delivery troubleshooting.
• Effortless Integration & Access: Access monitoring data from any device via an intuitive web interface. Seamlessly integrate Boro into your existing workflow using WebHook, SNMP, and ControlAPI.
• Operational Efficiency: Reduce the workload on QA and network engineers through automated regular reporting, advanced visualization dashboards, and smart threshold tuning that eliminates false alarms.
Learn more
VisualEther
VisualEther transforms Wireshark's packet captures (PCAP/PCAPNG) into easily interpretable sequence diagrams, allowing AI coding agents such as Claude Code to articulate, in straightforward language, the reasons behind a network session's failure. While Wireshark provides a detailed view of each packet, it does not present the overall conversation; VisualEther generates this conversation directly from the capture file—ensuring accuracy and reproducibility—with over 82 integrated protocol templates that cover a wide range, including 5G NR, 5G core, LTE, IMS/VoLTE, SIP/RTP, BGP, OSPF, DNS, HTTP/2, HTTP/3, TLS, Kerberos, Diameter, GTP, and various industrial protocols like Modbus, DNP3, and EtherNet/IP. An included MCP server selectively extracts only the relevant messages and fields, enabling an AI agent to process kilobytes of structured information rather than an overwhelming amount of raw packet data, effectively conducting an author-debug-verify cycle that references specific frame numbers as proof. Built upon the functionality of tshark, if Wireshark can analyze it, VisualEther can create a diagram for it. With capabilities for observation, analysis, diagnosis, and automation, VisualEther is available on Windows (through winget), macOS (via Homebrew), and Linux (using apt/dnf), offering a free Community edition alongside paid Professional and Server editions for more advanced needs. This comprehensive tool not only streamlines network analysis but also enhances the troubleshooting process for IT professionals.
Learn more
Xplico
Xplico is a prominent tool featured in many leading digital forensics and penetration testing distributions, including Kali Linux, BackTrack, DEFT, Security Onion, Matriux, BackBox, CERT Forensics Tools, Pentoo, and CERT-Toolkit. It supports simultaneous access for multiple users, allowing each to manage one or several cases effectively. The interface is web-based, and its backend database options include SQLite, MySQL, or PostgreSQL. Additionally, Xplico can function as a Cloud Network Forensic Analysis Tool. Its primary objective is to extract application data from internet traffic captures, such as retrieving emails via protocols like POP, IMAP, and SMTP, along with HTTP content, VoIP calls through SIP, and file transfers using FTP and TFTP from pcap files. Importantly, Xplico is not classified as a network protocol analyzer. As an open-source Network Forensic Analysis Tool (NFAT), it organizes the reassembled data with an associated XML file that distinctly identifies the data flows and the corresponding pcap file. This structured approach enables users to efficiently analyze and manage the data extracted from network traffic.
Learn more
Pricing
Pricing Starts At:
$1,300 one-time payment
Free Version:
Yes
Integrations
No Integrations at this time
Company Details
Company:
Netresec
Year Founded:
2010
Headquarters:
Sweden
Website:
www.netresec.com/
Media
Recommended Products
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Product Details
Platforms
Windows
Linux
Types of Training
Training Docs
Live Training (Online)
In Person
Training Videos
Customer Support
Business Hours
Online Support
NetworkMiner Features and Options
NetworkMiner User Reviews
Write a Review- Previous
- Next
