srixivas/PcapXray

Health v2 · maintenance only

Adoption not part of the score

1874 stars · 290 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PcapXray is a Python-based network forensics tool that visualizes PCAP files or live traffic as an annotated network diagram. It identifies devices, highlights important, Tor, and potentially malicious communications, and extracts data from packets into reports.

Use cases

• visualize a pcap file as a network diagram
• detect tor traffic in a packet capture
• identify devices and vendors in network traffic
• flag potentially malicious traffic in a pcap
• speed up network forensics investigation
• capture live traffic and graph it in real time
• extract payloads and session data from packet captures

When to choose

• you need a quick visual overview of hosts and communication flows in a pcap
• you want offline packet capture analysis with device identification and Tor detection
• you prefer a GUI tool for network forensics on Linux

When to avoid

• you need deep packet inspection or IDS-grade detection rather than visualization
• you require a headless or automated pipeline without a GUI
• you need Windows-native support without extra setup

Facets

application · maturity active

networking security data-visualization gui search-engine security networking developer-tools analytics python cross-platform network-forensics pcap-analysis packet-capture tor-detection network-diagram digital-forensics traffic-analysis malicious-traffic device-identification live-capture linux desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="srixivas/PcapXray")