Compare software

MalcolmA-Packets
Free

Free to use; the source is published on GitHub by CISA.

 Freemium

Free public analysis up to 25 MB; private plans and on-prem deployments are paid.

Linux, Self-hosted Web
  • Brings PCAP, Zeek and Suricata data together in one searchable interface
  • Deployable with Docker, Kubernetes or an installable ISO
  • No signup needed for public analysis
  • Pulls out credentials, files and sessions automatically
  • A large multi-container stack that needs substantial server resources
  • Aimed at trained analysts rather than casual home users
  • Free results pages are public
  • Free uploads limited to 25 MB
Self-hosted Web application
Open source Closed source
License not stated License not stated
Not stated if an account is needed No account needed
Works offline Needs internet

Checked September 23, 2026

Checked October 2, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.