No. 12 of 20 ·Network Packet Capture Software

EndaceProbe

Web · Linux · Self-hosted · API

Freedom report

One barScore 5.5

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely2 of 6 device platforms
DocumentedPlans, terms and facts published

EndaceProbe is ranked #12 of 20 in network packet capture software on Freedom251. It runs on API, Linux, Self-hosted, Web.

EndaceProbe plans and pricing

All plans

EndaceProbe Not published On-premises appliances and cloud deployments; model capacities range from 500 Mbps to 100 Gbps sustained recording endace.com · 4 Oct 2026

Compared on network packet capture software

Live capture: Yes
Offline trace analysis: Yes
Display filters: Yes
Protocol decryption: Yes
Capture file formats: pcap, pcapng, ERF
Supported platforms: On-premises appliances, AWS, Microsoft Azure, VMware, KVM, Nutanix, browser-based EndaceVision

Best EndaceProbe alternatives

See all 19

Two bars Termshark Free tier No. 1Free6.7 Two bars Malcolm Free tier No. 2Free6.6 Two bars NetworkMiner Free tier No. 3Free6.5 Two bars Sniffnet Free tier No. 4Free6.5 Two bars tcpdump Free tier No. 5Free6.5 Two bars TShark Free tier No. 6Free6.5

The record

Purpose: EndaceProbe provides continuous full packet capture and recorded network history for investigating security threats, performance issues, and outages.
Deployment: The product is available as physical appliances and as cloud or virtual deployments, including AWS, Microsoft Azure, VMware, KVM, and Nutanix options.
Recording capacity: Listed models range from 10 Gb/s to 100 Gb/s sustained recording for hardware appliances, with cloud and vProbe models also listed.
Search and management: InvestigationManager provides central search and data mining, while EndaceCMS provides central fabric management across physical and cloud probes.
Packet analysis: EndaceVision is browser-based, and hosted Wireshark can decode packet data on the EndaceProbe without downloading large PCAP files.
Integrations: Endace describes prebuilt integrations with Elastic and says its API supports integration with open-source, custom, and Fusion Partner tools.
Hosting: EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using Application Dock.
Security: Endace states that its probes use a cryptographic module for encrypted communications and have FIPS 140-3 validation, Common Criteria NDcPP v2.2e certification, and DoDIN APL listing.
OSm controls: OSm uses hardened Linux releases, disables shell access, supports Radius, TACACS, and LDAP authentication, and provides role-based access control.
Support: The Americas support terms list 24×7×365 availability, phone and email support, remote diagnostics, software updates, and a five-minute initial phone response time.
Intended users: Endace identifies customer sectors including healthcare, retail, banking and finance, military, government, telecom, and broadcast and entertainment.
Recording scale: Listed models range from 500 Mbps to 100 Gbps sustained recording, with listed packet storage from 1 TB to more than 3 PB.
Hosted applications: EndaceProbe appliances can host third-party tools, including EndaceFlow for NetFlow, using the platform's application hosting capability.
Investigation: The browser-based EndaceVision application searches and examines historical packet data and includes Wireshark for packet decoding without downloading large pcaps.

Where it ranks on Freedom251

Best Network Packet Capture Software in 2026#12 of 20

Is EndaceProbe yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote EndaceProbe

Sources

endace.com/endaceprobe· checked 4 Oct 2026
endace.com/endacevision· checked 4 Oct 2026
endace.com/elastic-security· checked 4 Oct 2026
endace.com/learn/all-about-fips-140-3-common-crite· checked 4 Oct 2026
endace.com/osm-datasheet.pdf· checked 4 Oct 2026
endace.com/endaceprobe-support-terms-us.pdf· checked 4 Oct 2026
endace.com/about-us· checked 4 Oct 2026
endace.com/endaceprobes-achieve-common-criteria-an· checked 4 Oct 2026