Xplico

7.1easy start · #5 of 33
in Network Packet Analyzer Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted, Web.

Xplico is ranked #5 of 33 in network packet analyzer software on The Geeks Club. It runs on Linux, Self-hosted, Web. There is a free plan.

Xplico plans and pricing

All plans

Xplico Free Software Free No data-entry or input-file count limit · hard-drive size is the only limit wiki.xplico.org · 1 Oct 2026

Compared on network packet analyzer software

Free plan: Yes
Live capture: Yes
Command-line tool: Yes
Traffic decryption: No
Operating systems: Linux and Unix-like operating systems
Capture file formats: PCAP
Protocol dissectors: Yes

Best Xplico alternatives

See all 12

NETCAP 0 of 4 in the starter kit Lesson 17.8 NetworkMiner 0 of 4 in the starter kit Lesson 27.2 PacketSafari 0 of 4 in the starter kit Lesson 37.1 Scapy 0 of 4 in the starter kit Lesson 47.1 Zui 0 of 4 in the starter kit Lesson 67.1 Arkime 0 of 4 in the starter kit Lesson 77.0

The record

Purpose: Xplico extracts application data from internet traffic captures and is an open-source Network Forensic Analysis Tool.
Extracted data: From PCAP files, Xplico can extract email, HTTP contents, VoIP calls, FTP and TFTP data.
Protocol support: Supported protocols include HTTP, SIP, IMAP, POP, SMTP, TCP, UDP and IPv6.
Protocol identification: Xplico provides Port Independent Protocol Identification for each application protocol.
Processing: Xplico supports multithreading and realtime processing whose performance depends on flows, protocol types and computer resources.
Storage: Output can be written to SQLite or MySQL databases and/or files.
Web interface: The product has a web user interface, supports concurrent users managing one or more cases, and can use SQLite, MySQL or PostgreSQL as its backend database.
Modularity: Capture, dissector and dispatcher components are modular, and dispatchers can target files, SQLite, Oracle, MySQL, PostgreSQL or network sockets.
Integrations: The official site lists CapAnalysis as a PCAP viewer and n2disk, netsniff-ng and Junkie as capture tools.
Deployment: Official downloads cover Fedora, CentOS/RHEL and Ubuntu, plus source code and a VirtualBox image.
Release status: The official status page lists decoder version 1.2.2 as stable and 1.3.0 as the development version.
Security limit: The status page lists SSL/TLS and IPsec dissectors at 0% with keys and 802.11 at 60% with no encryption support.
Licensing: The Xplico decoder, DeMa and listed manipulators are GPL v2.0, while Xplico Interface can use MPL 1.1 or later, GPL 2.0 or later, or LGPL 2.1 or later.
Support: Documentation is provided through the Xplico Wiki, with questions and problem reports handled through the forum and [email protected].
Price from: Free

Where it ranks on The Geeks Club

Best Network Packet Analyzer Software in 2026#5 of 33

Is Xplico yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Xplico

Sources

xplico.org/about· checked 1 Oct 2026
xplico.org· checked 1 Oct 2026
wiki.xplico.org/doku.php· checked 1 Oct 2026
xplico.org/download· checked 1 Oct 2026
xplico.org/status· checked 1 Oct 2026
xplico.org/docs/license· checked 1 Oct 2026
xplico.org/docs· checked 1 Oct 2026
wiki.xplico.org/doku.php· checked 1 Oct 2026