AuraCap is a free, open-source network packet analyzer built for macOS Apple Silicon. Designed for network engineers, cybersecurity professionals, and beginners who need powerful packet analysis without Wireshark's complexity.
| Aspect | Wireshark | AuraCap |
|---|---|---|
| Platform | Cross-platform | macOS-native (Apple Silicon optimized) |
| Learning Curve | Steep | Beginner-friendly |
| Interface | Complex menus | Clean, focused UI |
| Startup | Slow, heavy | Instant launch |
| Design | Dated | Modern dark theme |
| Dependencies | Requires WinPcap/Npcap | Built-in (Tauri) |
| Price | Free (but complex) | Free & open-source |
AuraCap provides professional-grade packet analysis in a fraction of the complexity—without sacrificing the power experts need.
- Debug network issues faster with instant packet summaries
- Filter traffic with simple display filters
- Export captures for further analysis in Wireshark
- Analyze suspicious traffic on-the-fly
- Inspect payloads (JSON, JWT, hex)
- Follow TCP/UDP streams in human-readable form
- Learn networking without overwhelming details
- Natural language packet explanations
- No prior experience required
Download the latest release from GitHub Releases:
- macOS:
.dmginstaller (Apple Silicon recommended) - Windows:
.msi/.exeinstaller - Linux:
.AppImage
# Clone the repository
git clone https://github.com/pallab-js/r-wire.git
cd r-wire
# Install dependencies
npm install
# Run in development mode (requires sudo for packet capture)
sudo npm run tauri dev
# Build for production
npm run tauri buildNote: Packet capture requires elevated privileges. Run with
sudoon macOS/Linux or as Administrator on Windows.
- Real-time capture from any network interface
- Instant filtering with display filters (e.g.,
protocol:tcp,port:443) - BPF support for advanced capture filters
- Export to PCAP for external analysis
- Packet list with virtual scrolling (handles millions of packets)
- Packet details with protocol layer breakdown
- Hex view for raw byte inspection
- Follow Stream for TCP/UDP conversation reassembly
- Protocol statistics (traffic rates, protocol distribution)
- Interface selection for multi-NIC environments
- Artifact extraction from packets
┌─────────────────────────────────────────────────────────────┐
│ Frontend │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────┐ │
│ │ SvelteKit │ │ Tailwind │ │ TypeScript │ │
│ │ (UI) │ │ (Style) │ │ (Logic) │ │
│ └─────────────┘ └─────────────┘ └─────────────────────┘ │
└──────────────────────────┬──────────────────────────────────┘
│ Tauri IPC
┌──────────────────────────┴──────────────────────────────────┐
│ Backend │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────────────┐ │
│ │ Rust │ │ PCAP │ │ SQLite │ │
│ │ (Core) │ │ (Capture) │ │ (Storage) │ │
│ └─────────────┘ └─────────────┘ └─────────────────────┘ │
└─────────────────────────────────────────────────────────────┘
Tech Stack:
- Frontend: SvelteKit, TypeScript, Tailwind CSS
- Backend: Rust, pcapcapture, SQLite
- Desktop: Tauri 2.x (native performance)
AuraCap follows the Supabase-inspired design system:
- Dark-mode-only - Optimized for long analysis sessions
- Emerald accents - Subtle brand color for key actions
- Minimalist - Every pixel serves a purpose
- Performance-first - Virtual scrolling handles millions of packets
# Run tests
npm run test:unit && cd src-tauri && cargo test
# Lint and format
npm run lint
npm run format
# Type check
npm run checkContributions are welcome! Please read our Contributing Guidelines.
- Fork the repository
- Create your feature branch (
git checkout -b feature/amazing) - Commit your changes (
git commit -m 'Add amazing feature') - Push to the branch (
git push origin feature/amazing) - Open a Pull Request
See ROADMAP.md for upcoming features.
Licensed under the MIT License. See LICENSE for details.
AuraCap — Network analysis for everyone.
Made with precision for macOS Apple Silicon.