NetworkMiner

NetworkMiner is ranked #2 of 33 in network packet analyzer software on The Geeks Club. It runs on Linux, macOS, Windows. There is a free plan.

NetworkMiner plans and pricing

All plans

Free Edition Free live sniffing · PCAP/ETL parsing · Windows/Linux · no PcapNG parsing netresec.com · 1 Oct 2026

Single User License $1,300 once valid for three years from purchase one named employee · GUI application · free updates and support for three years netresec.com · 1 Oct 2026

Corporate License $6,500 once perpetual license unlimited employees in registered organization · GUI and command-line applications · free updates and support during first year netresec.com · 1 Oct 2026

Compared on network packet analyzer software

Free plan: Yes

Best NetworkMiner alternatives

See all 12

7.8 NETCAP Free plan

7.1 PacketSafari Free plan

7.1 Scapy Free plan

7.1 Xplico Free plan

7.0 Arkime Free plan

7.0 PCAPdroid Free plan

NetworkMiner

Purpose: NetworkMiner extracts artifacts such as files, images, emails and passwords from captured network traffic in PCAP files and can sniff live network traffic.
Host inventory: The software aggregates detailed information about IP addresses into a network host inventory for passive asset discovery and communication overviews.
Primary users: Netresec says NetworkMiner has been used by incident response teams, law enforcement, companies and organizations worldwide since its first release in 2007.
Professional inputs: NetworkMiner Professional accepts PCAP, PcapNG and ETL capture files, Pcap-over-IP, PacketCache data and live sniffing.
Professional exports: NetworkMiner Professional exports data in CSV for Excel, JSON-LD and XML formats.
Protocol analysis: Professional supports file extraction from FTP, TFTP, HTTP, HTTP/2, SMB, SMB2, SMTP, POP3, IMAP and LPR protocols.
VoIP: Professional supports SIP, RTP, G.711 and G.722, including audio extraction from unencrypted VoIP calls.
OSINT: Professional provides OSINT lookups for file hashes, IP addresses, domain names and URLs, plus offline IP-to-country and IP ASN lookups.
Command line: NetworkMinerCLI provides command-line scripting support and is available only with a Corporate License.
TLS handling: NetworkMiner does not decrypt HTTPS or other TLS-encrypted sessions; it extracts X.509 certificates, and PolarProxy can decrypt traffic and forward it to NetworkMiner.
Data location: NetworkMiner stores extracted data locally on the end-user device rather than in the cloud.
Open source: The source code is written in 100% managed C# on the Microsoft .NET Framework and is released as GPLv2 free and open source software.
Safety guidance: Netresec warns that opening PCAPs can automatically extract malware and recommends Linux or Windows Sandbox to reduce self-infection risk.
FIPS compliance: NetworkMiner Professional is not FIPS 140-compliant and requires FIPS enforcement to be disabled on the PC.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Network Packet Analyzer Software in 2026#2 of 33
Best Network Protocol Analyzers in 2026#2 of 30
Best Digital Forensics Software in 2026#3 of 29
Best Network Packet Capture Software in 2026#3 of 20

Is NetworkMiner yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote NetworkMiner

Sources

netresec.com· checked 1 Oct 2026
netresec.com· checked 1 Oct 2026
netresec.com/files/NetworkMiner-Professional_Product· checked 1 Oct 2026
netresec.com· checked 1 Oct 2026
netresec.com· checked 1 Oct 2026