Moloch
An open-source, large-scale network packet capture, indexing, and analysis system for security and network monitoring.
What is Moloch?
Arkime is an open-source network analysis and packet capture system that captures, indexes, and stores network traffic in standard PCAP format. It solves the problem of costly and inflexible commercial full-packet capture systems by providing a scalable, self-hosted alternative for deep network monitoring and security analysis.
Security analysts, network engineers, and DevOps teams who need to monitor, analyze, and retain large volumes of network traffic for troubleshooting, forensics, or threat detection.
Developers choose Arkime for its ability to scale to tens of gigabits per second, its open-source nature that eliminates vendor lock-in, and its integration with existing tools like Wireshark, all while providing a cost-effective alternative to commercial solutions.
Overview
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
Use Cases
Best For
- Replacing expensive commercial full-packet capture systems in enterprise networks
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
