PacketQ
A command-line tool that allows SQL queries to be executed directly on PCAP files for network traffic analysis with support for multiple output formats.
A command-line tool that allows SQL queries to be executed directly on PCAP files for network traffic analysis with support for multiple output formats.
Checked October 2026.
PacketQ is a command-line tool that enables users to execute SQL queries directly on PCAP (packet capture) files for network traffic analysis.
The tool provides native decoding capabilities for PCAP files, allowing analysts to query network data using standard SQL syntax. Users can perform various database operations including grouping, sorting, counting, and filtering on captured network packets.
PacketQ supports multiple output formats including JSON, CSV, and XML, making it compatible with different analysis workflows and reporting requirements. The tool features extensible protocol decoding, enabling support for various network protocols beyond basic packet structures.
A built-in DNS resolver function assists with hostname resolution during analysis. The tool also includes a web server component that allows remote inspection of PCAP files through a browser interface.
PacketQ is designed for network security professionals, forensic analysts, and researchers who need to perform detailed analysis of network traffic captured in PCAP format using familiar SQL query syntax.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about PacketQ: features, pricing and alternatives.
PacketQ is a product in the Digital Forensics category. It covers Packet Analysis, PCAP and SQL.
PacketQ is free. Download and setup instructions are at https://github.com/DNS-OARC/PacketQ.
Alternatives to PacketQ listed on CybersecTools:
Compare all PacketQ alternatives at https://cybersectools.com/alternatives/packetq
PacketQ is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
OSXCollector is a forensic evidence collection & analysis toolkit for OSX.
Django based web application for network traffic analysis with protocol handling capabilities.
Lossless packet capture & analysis appliance at 10–200 Gbps line rate.
High-performance remote packet capture and collection tool used for forensic analysis in cloud workloads.
A DFVFS backed viewer project with a WxPython GUI, aiming to enhance file extraction and viewing capabilities.
Generate comprehensive reports about Windows systems with detailed system, security, networking, and USB information.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
