Repolode
ProxymanApp

ProxymanApp/TCPViewer

A native macOS packet viewer built on Wireshark libraries, offering a simpler alternative to Wireshark for capturing and inspecting network traffic.

Open-source alternative to:Wireshark

Stars
565
Forks
34
Open issues
22
Last commit
2 days ago

What is it?

TCP Viewer captures and reads network packets on macOS. It uses the system libpcap for live capture and Wireshark libraries for protocol dissection and packet details, so developers can inspect traffic without the full Wireshark interface.

The app lets you pick a network interface and start or stop a capture, group packets by app, domain, or IP address, and filter by protocols such as TCP, UDP, DNS, HTTP, TLS, and WebSocket. Protocol fields and raw bytes are shown side by side, and TCP and UDP streams can be followed in either direction with text or hex views.

PCAP and PCAPNG files can be opened for preview and exported as all, filtered, or selected packets. A command-line tool (tcpviewer-cli) and an MCP interface can also automate captures, filters, and statistics. The app is built with AppKit, requires Apple Silicon and macOS 15 or later, and is licensed under GPL-2.0-or-later.

Key features

  • 01Live packet capture from a selected network interface
  • 02Group packets by app, domain, or IP address
  • 03Protocol filters for TCP, UDP, DNS, HTTP, TLS, and WebSocket
  • 04Protocol field tree and raw byte view for each packet
  • 05TCP and UDP stream following with text and hex views
  • 06Open and export PCAP and PCAPNG files

Use cases

  • Debugging app or domain network traffic on a Mac
  • Inspecting TLS, HTTP, or WebSocket traffic at the packet level
  • Reviewing PCAP files captured elsewhere without installing Wireshark
  • Letting an AI agent query a live capture through MCP

Quick start

  1. 1

    Download the DMG from the releases page or the README download link

  2. 2

    Clone the repository with submodules

    git clone --recurse-submodules <repo-url>
  3. 3

    Bootstrap the pinned Wireshark dependency

    ./scripts/bootstrap-wireshark.sh
  4. 4

    Build the app from the command line

    xcodebuild -project TCPViewer.xcodeproj -scheme TCPViewer build

Things to know

  • Runs only on Apple Silicon Macs with macOS 15 or later.
  • Licensed under GPL-2.0-or-later, a copyleft license.
  • Building from source requires Xcode 16 and compiling Wireshark libraries from source.

In collections

Topics

FAQ

What is TCPViewer?
A native macOS packet viewer built on Wireshark libraries, offering a simpler alternative to Wireshark for capturing and inspecting network traffic. TCP Viewer captures and reads network packets on macOS. It uses the system libpcap for live capture and Wireshark libraries for protocol dissection and packet details, so developers can inspect traffic without the full Wireshark interface.
Is TCPViewer free to use? What license does it have?
TCPViewer is open source under the Other license. Check the license terms before using it in commercial products.
Is TCPViewer still maintained?
Actively maintained. The last commit to TCPViewer was on Oct 23, 2026.
What can I use TCPViewer for?
Debugging app or domain network traffic on a Mac Inspecting TLS, HTTP, or WebSocket traffic at the packet level Reviewing PCAP files captured elsewhere without installing Wireshark Letting an AI agent query a live capture through MCP
How do I install TCPViewer?
Download the DMG from the releases page or the README download link Clone the repository with submodules: git clone --recurse-submodules <repo-url> Bootstrap the pinned Wireshark dependency: ./scripts/bootstrap-wireshark.sh Build the app from the command line: xcodebuild -project TCPViewer.xcodeproj -scheme TCPViewer build
Where can I get TCPViewer?
The source code and installation instructions are on GitHub: https://github.com/ProxymanApp/TCPViewer

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects