RawCap logo

RawCap

Monitors network activity through raw sockets on Windows interfaces, including localhost, without external dependencies.

Made by netresec

  • Packet Sniffer

What is RawCap?

RawCap is a powerful network monitoring tool that enables users to capture and analyze network activity on Windows systems. This lightweight command-line utility leverages raw sockets to provide comprehensive visibility into the network traffic traversing various interfaces, including local loopback, Wi-Fi, and PPP connections

Highlights

  • Raw socket-based network sniffing: RawCap utilizes low-level raw sockets to capture network data, allowing it to monitor even the most granular network activity
  • Broad interface support: The tool can sniff traffic across a wide range of network interfaces, including local loopback (127.0.0.1), Wi-Fi, and PPP connections
  • Minimal resource usage: RawCap is designed to be lightweight, with a small file size (just 23 kB) and minimal impact on system memory and CPU resources
  • Standalone and portable: RawCap does not require any additional libraries or DLLs beyond the .NET Framework 2.0, making it a self-contained and easily deployable solution.

Platforms

  • Windows

Languages

  • English

Social

Features

    • Command line interface

    • Portable