See what's really happening on your network.
Capture, intercept, and analyze traffic at the kernel level — all from a single tool.
Windows 10+ (64-bit) · Requires administrator
StrikeWire is a Windows-native network analysis tool that captures live traffic using WinDivert, parses it across 15+ protocols, and supports everything from passive sniffing to active TLS interception with on-the-fly certificate generation.
Kernel-level packet capture with full protocol dissection — IPv4/v6, TCP, UDP, ICMP, DNS, HTTP/1.1 and HTTP/2, TLS, DHCP, FTP, SMTP, SSH, SMB2, and WebSocket. Stream reassembly, conversation tracking, hex viewer, protocol tree, and a packet timeline provide complete visibility into what's moving across the wire.
Intercept mode pauses traffic so each packet can be forwarded, dropped, or edited before reaching its destination. The rules engine automates this — match on any protocol field and apply actions automatically.
A built-in proxy decrypts HTTPS and other TLS traffic by generating certificates on the fly. Encrypted payloads become readable plaintext without leaving the app.
Flexible capture and display filters with full boolean logic. PCAP export, session save/load, stream and stats dumps. Five built-in themes including light and dark variants.
Requires Visual Studio 2022, Qt 6, CMake 3.24+, and OpenSSL.
build.bat app # debug build
build.bat release app # release build
build.bat test # build and run tests
build.bat installer # build installer (requires Inno Setup 6)
BSD 3-Clause. See LICENSE.