PacketQ

Name: PacketQ
Author: DNS-OARC

A command-line tool that queries packet capture files with SQL-like statements.

By DNS-OARC

Free Open sourceLinux Command line

Official websitedns-oarc.net

Compare PacketQ with another product

Alternatives

tcpdumpThe classic command-line packet capture and analysis tool.
ArkimeStore and search captured network traffic through a web interface.
NetworkMinerNetwork forensics tool that extracts files and credentials from captures.
A-PacketsA-Packets analyzes uploaded PCAP files in a browser and extracts hosts, sessions, credentials, and files, replacing SQL-like capture queries with a web interface.

See all alternatives

About PacketQ

PacketQ runs SQL queries directly against PCAP files and can output results as JSON, CSV, or XML. It also includes a simple web server for inspecting capture files remotely.

Packages are available for Debian, Ubuntu, and RPM based distributions.

Strengths

Queries PCAP files with SQL-like syntax
Exports JSON, CSV, and XML
Includes a simple web server for remote inspection

Limitations

Requires command-line use
Works from packet capture files rather than live traffic

Details

Pricing: FreeFree and open source under GPL-3.0-or-later.
License: GPL-3.0-or-later
Developer: DNS-OARC
Platforms: Linux, Command line
How it runs: Downloadable app
Best suited for: Network analysts querying saved packet captures
Categories: Network tools, CLI tools
Last verified: October 8, 2026
Added: October 8, 2026
Provenance: Selected from the Homebrew formula
Sources: dns-oarc.net/tools/packetq

Report a wrong fact or a dead link on this listing