Packet Capture (cStor®) vs Rekall: side-by-side comparison (2026)
Packet Capture (cStor®) is a commercial digital forensics solution by cPacket Networks. Rekall is a free digital forensics solution. Features, integrations, deployment and the company behind each one, side by side.
Lossless packet capture & analysis appliance at 10–200 Gbps line rate.
Rekall is a discontinued project that aimed to improve memory analysis methodology but faced challenges due to the nature of in-memory structure and increasing security measures.
Side-by-side comparison
Feature
Packet Capture (cStor®)
Rekall
Pricing model
Commercial
Free
Category
Digital Forensics
Digital Forensics
Deployment and fit
Deployment type
Hybrid
On-Premises
Company size fit
Mid-Market, Enterprise
Mid-Market, Enterprise
Open source
GitHub stars
–
1,999
Last commit
–
Oct 2020
Company
Company
cPacket Networks
–
Use cases and capabilities
Packet Capture
Yes
No
PCAP
Yes
No
Network Forensic Analysis
Yes
No
Network Monitoring
Yes
No
Network Visibility
Yes
No
Packet Analysis
Yes
No
Observability
Yes
No
Memory Forensics
No
Yes
Volatility
No
Yes
Core features
10 features listed
No features listed
Integrations
6 integrations listed
No integrations listed
Need help choosing?
See more solutions in this category, or build a security stack from your picks.
