PCAP Sentry is a beginner-friendly educational tool for learning to identify malware network traffic patterns. It analyzes network packet captures (.pcap / .pcapng) and teaches you how to recognize suspicious activity with clear explanations and hands-on practice.
Features:
- Beginner-focused explanations for understanding suspicious network traffic
- Risk scoring (0-100) to learn which patterns indicate malicious behavior
- Behavioral detection for beaconing, DNS tunneling, port scanning, data exfiltration
- Real-world threat intelligence integration (OTX, URLhaus, AbuseIPDB)
- AI-powered guidance with local LLM chat support
- Credential extraction learning from unencrypted protocols
- C2 pattern detection and Wireshark filter generation
- Trainable knowledge base for building malware signature libraries
- Works offline with local models and threat databases
Publisher’s description
What is PCAP Sentry?
PCAP Sentry by industrial-dave is open-source Windows software in the network tools category.
Installation and requirements
The publisher provides EXE (Inno Setup) installers for 64-bit Windows. Installation asks for administrator rights. A silent install is possible with the installer’s documented switches.
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Documented silent install
Cons
- No native ARM64 build
- Installation needs administrator rights
In short: PCAP Sentry is an open-source network tool tool for 64-bit PCs. Administrators can deploy it unattended.
Is PCAP Sentry safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
BFAF4D6C7655B477D0A8D7755DFD1DA998A4E5233E2F79949911CF26EEC2CD84· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 1 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 2026.2.17.2Latest | February 17, 2026 | — | 64-bit EXE (Inno Setup) |
Install from the command line
Silent install ›winget install --id industrial-dave.PCAP-Sentry -ePCAP_Sentry_Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-Related guide: How to use winget: install and update apps
Information
- Publisher
- industrial-dave
- Category
- Network tools
- Licence
- GPL-3.0
- Price
- Free
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- EXE (Inno Setup)
- Version
- 2026.2.17.2
- Released
- February 17, 2026
- Added to the catalogue
- February 19, 2026
- Versions listed
- 1
- Website
- github.com
- winget ID
- industrial-dave.PCAP-Sentry
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to PCAP Sentry
See all ›-
Open source6.6M ↓ -
Proprietary1.1M ↓ -
Nmap7.80Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing.Open source897.9K ↓ -
Open source1.5M ↓ -
Yggdrasil Network0.5.15The Yggdrasil network is a decentralized, peer-to-peer network that aims to create a more resilient and private internet infrastructure.Open source65.4K ↓ -
Open source170.3K ↓ -
simplewall3.8.7Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.Open source44.3K ↓ -
Speedtest by Ookla1.15.200.001The definitive way to test the speed and performance of your internet connection.Proprietary745.5K ↓
Frequently asked questions
Is PCAP Sentry free?
Yes. PCAP Sentry is open-source software under the GPL-3.0 licence.
Is PCAP Sentry safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install PCAP Sentry with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can PCAP Sentry be installed silently?
Yes. The silent install page lists the exact command for each installer.
Does PCAP Sentry run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
What are alternatives to PCAP Sentry?
Wireshark, ZeroTier One, Nmap, iPerf3 and Yggdrasil Network. The alternatives page compares them.
