Network
Analyzer
Real-time packet capture and threat detection. Run the pcap-agent binary then connect here to see your network traffic live.
[ − SETUP ]
// prerequisites · installation · usage
// prerequisites
Linux
sudo apt-get install -y libpcap-dev
// capture may require sudo
macOS
brew install libpcap
// must run with sudo
// installation
// option 1 — download binary (recommended)
| Platform | Download |
|---|---|
| Linux | pcap-agent-linux.tar.gz |
| Windows | pcap-agent-windows.zip |
| macOS (Intel) | pcap-agent-macos-intel.tar.gz |
| macOS (Apple Silicon) | pcap-agent-macos-apple-silicon.tar.gz |
Release details / checksums / provenance
// option 2 — build from source
git clone https://github.com/Ahlyx/pcap-agent.git
cd pcap-agent
go build -o pcap-agent ./cmd/agent
// usage
Windows PowerShell (run elevated)
// 1. download and extract
// 2. open PowerShell in this folder
// 3. start with automatic interface selection
.\pcap-agent start
// advanced: select an interface explicitly
.\pcap-agent list-interfaces
.\pcap-agent start --interface "<interface>"
Linux
// 1. download and extract
// 2. open a terminal in this folder
// 3. start with automatic interface selection
./pcap-agent start
// advanced: list or select an interface (use sudo if required)
./pcap-agent list-interfaces
./pcap-agent start --interface "<interface>"
macOS
// 1. download and extract
// 2. open a terminal in this folder
// 3. start with automatic interface selection
./pcap-agent start
// advanced: list or select an interface (use sudo if required)
./pcap-agent list-interfaces
./pcap-agent start --interface "<interface>"
// modes
local (default)
Opens a WebSocket on localhost:7777. Packet-analysis metadata stays between the local PCAP Agent and your browser; it is not transmitted through the Ahlyx Labs relay. Agent and browser must run on the same machine.
relay
Streams capture metadata through api.ahlyxlabs.com only after explicit confirmation. The agent prints a one-time dashboard launch link for the viewer; keep that link private and do not share it in screenshots or tickets.
// live packet flow
| TIME | SRC | DST | SERVICE | BYTES |
|---|
// alerts
// no alerts detected
// mac observations
// no MAC observations yet
// dns queries
| TIME | SRC | QUERY | TYPE | RESPONSE |
|---|
// threat enrichment
// no enrichment results yet