NETCAP vs Xplico
NETCAP
netcap.ioXplico
xplico.orgSide by side
| Figure | NETCAP | Xplico |
|---|---|---|
| Price from | €49/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 1 |
| Spec score · Network Packet Analyzer Software | 9.2 (#2) | 7.3 (#28) |
| Integrations | Pro lists handoffs or integrations with Wireshark, Metasploit, hashcat, John, and BetterCrack; Core includes a Maltego transformation plugin. | The official site lists CapAnalysis as a PCAP viewer and n2disk, netsniff-ng and Junkie as capture tools. |
| Purpose | NETCAP converts network packet streams into structured audit records for network analysis, security research, machine learning, and forensics. | Xplico extracts application data from internet traffic captures and is an open-source Network Forensic Analysis Tool. |
| Support | Pro includes email support, Enterprise offers priority support with an SLA, and Core lists community support. | Documentation is provided through the Xplico Wiki, with questions and problem reports handled through the forum and [email protected]. |
Plans
In their own words
NETCAP
NETCAP converts network packet streams into structured audit records for network analysis, security research, machine learning and forensics. Its free Core edition covers 66+ record types for protocols including TCP, UDP, HTTP, TLS, DNS and DHCP. Core captures live traffic, processes PCAP files, supports distributed collection and HTTP proxy capture, and outputs Protocol Buffers, CSV, JSON streams and Prometheus metrics. It is an open-source CLI under GPL-3.0, with platform binaries and Docker images.
Pro adds interactive graph analysis, a network activity timeline, investigation notes and more than 35 analysis modules. It can flag anomalies in decoded traffic and draft incident reports for editing; the maker says Pro analyzes captures locally without an upload step. Pro is available for macOS, Windows and Linux and includes email support. The plan is listed at $548 a month, with a €48/year option also shown, and a 14-day trial without a credit card. Enterprise has custom pricing and includes unlimited team seats, priority support with an SLA, custom integrations and volume licensing.
Xplico
Xplico is free, open-source network forensic software that extracts application data from PCAP traffic captures. It can recover email, HTTP content, VoIP calls, and FTP or TFTP data, with protocol support for HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, and IPv6. Port Independent Protocol Identification recognizes application protocols without depending on port numbers. Processing supports multithreading and realtime operation, although speed depends on flows, protocol types, and computer resources. Results can be written to files or SQLite and MySQL databases. A web interface lets concurrent users manage one or more cases, using SQLite, MySQL, or PostgreSQL as a backend. Modular capture, dissector, and dispatcher components can target files, databases, or network sockets. Downloads cover Fedora, CentOS/RHEL, and Ubuntu, alongside source code and a VirtualBox image. The free plan costs nothing; data-entry and input-file counts are unrestricted, with hard-drive size as the stated limit.