Skip to content
SPECIFICTION
Get listed

CapAnalysis

capanalysis.net

Free plan WebLinux
Visit capanalysis.net
Spec score 7.9 #17 of 32 in Network Packet Analyzer Software

What it is

CapAnalysis is a free, open-source web visual tool for examining captured network traffic on Linux. It indexes PCAP datasets and displays TCP, UDP, and ESP streams or flows, including geographic connection views. The web viewer handles individual PCAP files and sets of files. TCP analysis reports bytes lost in each direction and total bytes exchanged without counting retransmitted packets. Deep Packet Inspection identifies more than 140 protocols, allowing protocol-based flow filtering. Other filters cover IP address or port, destination country, data size, and date and time. An included MaxMind database identifies destination countries for IPv4 and IPv6 connections. PCAP files can also be imported from public URLs, including URLs pointing to ZIP archives. Debian and Ubuntu packages are listed in 32-bit and 64-bit versions. After installation, users open the application through a browser on port 9877. The demo accepts PCAP files up to 20 MB and deletes dataset data the following day at 00:00 UTC.

Spec sheet

Purpose
CapAnalysis is a web visual tool for analyzing large amounts of captured network traffic, aimed at information security specialists and system administrators.Read 8 Oct 2026 · capanalysis.net
Audience
The maker lists students, researchers, hackers, engineers, and developers as potential users.Read 8 Oct 2026 · capanalysis.net
Support
The maker invites users to contact them by form with project questions or other inquiries.Read 8 Oct 2026 · capanalysis.net
Browser access
After installation, the guide says to access the application in a browser at localhost:9877 or the server's IP address on port 9877.Read 8 Oct 2026 · capanalysis.net
Demo limit
A maker post says the demo accepts PCAP files up to 20 MB and automatically deletes dataset data at 00:00 UTC on the day after creation.Read 8 Oct 2026 · capanalysis.net
Filtering
Filters include IP or port, country, data size, protocol, and date and time.Read 8 Oct 2026 · capanalysis.net
GeoIP
It identifies the destination country for connections using an included MaxMind database for IPv4 and IPv6.Read 8 Oct 2026 · capanalysis.net
Import from URL
A 2016 maker post says users can import a publicly available PCAP by URL, including a PCAP inside a ZIP archive.Read 8 Oct 2026 · capanalysis.net
Linux distributions
The maker's installation guide lists Debian and Ubuntu in 32-bit and 64-bit packages.Read 8 Oct 2026 · capanalysis.net
Multiple files
The web PCAP viewer can manage sets of PCAP files as well as individual files.Read 8 Oct 2026 · capanalysis.net
PCAP indexing
It indexes PCAP datasets and presents TCP, UDP, and ESP streams or flows, including geographic representations of connections.Read 8 Oct 2026 · capanalysis.net
Protocol inspection
Deep Packet Inspection identifies more than 140 protocols, enabling flows to be filtered by protocol.Read 8 Oct 2026 · capanalysis.net
TCP reassembly
For TCP flows, it can report bytes lost in each direction and total bytes exchanged while excluding retransmitted packets.Read 8 Oct 2026 · capanalysis.net

Plans and prices

CapAnalysis Free Open-source software under GNU General Public License version 2 Read 8 Oct 2026 · capanalysis.net

Every CapAnalysis plan and price →

Strong points and limits

Strong points

  • Free plan and open-source GNU GPLv2 license
  • Deep Packet Inspection identifies over 140 protocols
  • Filters include IP, country, size, protocol, and time
  • Handles individual PCAP files or file sets
  • Supports IPv4 and IPv6 GeoIP destinations

Limits

  • Demo limits PCAP files to 20 MB
  • Demo data is deleted the following day
  • Listed operating systems are Debian and Ubuntu Linux
  • Browser access uses port 9877

Who it suits

It suits information security specialists, system administrators, students, researchers, hackers, engineers, and developers analyzing PCAP traffic. Linux users with Debian or Ubuntu can install the listed packages.

Verdict

CapAnalysis combines PCAP indexing, protocol inspection, flow measurements, GeoIP, and detailed filtering in a browser-based Linux tool. Its demo size and next-day deletion rules matter when evaluating it for larger or persistent datasets.

Where Specifiction places it

Alternatives to CapAnalysisAll alternatives →