PacketSafari vs Xplico
PacketSafari
packetsafari.comXplico
xplico.orgSide by side
| Figure | PacketSafari | Xplico |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 4 | 1 |
| Spec score · Network Packet Analyzer Software | 8.6 (#5) | 7.3 (#28) |
| Integrations | Security intelligence sources can include ET Open, abuse.ch SSLBL and URLhaus, and Stamus lateral-movement feeds. | The official site lists CapAnalysis as a PCAP viewer and n2disk, netsniff-ng and Junkie as capture tools. |
| Purpose | PacketSafari investigates packet captures for root-cause, performance, and security questions and returns findings linked to packet evidence. | Xplico extracts application data from internet traffic captures and is an open-source Network Forensic Analysis Tool. |
Plans
PacketSafari
- Free EvaluationFree
- Dedicated Enterprise SaaSPriced on request
- Enterprise On-PremPriced on request
- Teams SaaSPriced on request
In their own words
PacketSafari
PacketSafari has no write-up on Specifiction yet; its figures are above.
Xplico
Xplico is free, open-source network forensic software that extracts application data from PCAP traffic captures. It can recover email, HTTP content, VoIP calls, and FTP or TFTP data, with protocol support for HTTP, SIP, IMAP, POP, SMTP, TCP, UDP, and IPv6. Port Independent Protocol Identification recognizes application protocols without depending on port numbers. Processing supports multithreading and realtime operation, although speed depends on flows, protocol types, and computer resources. Results can be written to files or SQLite and MySQL databases. A web interface lets concurrent users manage one or more cases, using SQLite, MySQL, or PostgreSQL as a backend. Modular capture, dissector, and dispatcher components can target files, databases, or network sockets. Downloads cover Fedora, CentOS/RHEL, and Ubuntu, alongside source code and a VirtualBox image. The free plan costs nothing; data-entry and input-file counts are unrestricted, with hard-drive size as the stated limit.