Choose the license that fits your Mac setup. All plans include the full TCP Viewer feature set with one-time pricing.
$29/once
For one Mac
$39/once
Best value for two Macs
$79/once
For long-term use
For teams and companies
Give every Mac the full TCP Viewer PRO feature set. Manage one shared license and move seats between people in your organization.
$39per seat
One-time payment.
$195 total
TCP Viewer comes from the same indie Mac team behind Proxyman and Tiny Shield: real products, real users, and practical support from people who build debugging tools every day.
Secure checkout powered by Stripe.
7-day refund policy.
TCP Viewer is a newer, Mac-only packet viewer. It does not replace every network tool. It gives Mac users a focused way to capture, understand, and share packets.
Why TCP Viewer
The main capture UI is built with AppKit for a fast, familiar Mac experience.
PcapPlusPlus handles packet capture, parsing, and pcap or pcapng files.
libwireshark provides deep protocol dissection inside the simpler Mac interface.
Overview, Endpoints, app groups, and domain groups help you find the busy traffic first.
Read the GPL-2.0-or-later source, report an issue, or contribute on GitHub.
Mature analysis suite
Best for: Deep protocol analysis on macOS, Windows, and Linux.
Full comparisonWhere Wireshark is stronger
Wireshark has been developed since 1998. It covers more analysis tools, statistics, protocols, and expert workflows.
Why TCP Viewer may fit better
Choose TCP Viewer for a smaller AppKit interface, quick capture summaries, and grouping by app or domain on your Mac.
Where tcpdump is stronger
tcpdump is light, scriptable, and works well when you do not need a desktop interface.
Why TCP Viewer may fit better
Choose TCP Viewer when you want a packet table, decoded fields, hex view, charts, search, and saved capture files in one window.
Intercepting proxy
Best for: Reading, changing, replaying, or scripting HTTP and HTTPS flows.
Full comparisonWhere mitmproxy is stronger
mitmproxy can edit decrypted application traffic after you route it through the proxy and trust its certificate.
Why TCP Viewer may fit better
Choose TCP Viewer for packet-level DNS, TCP, UDP, and TLS capture without turning the app into an HTTP proxy.
HTTP debugging proxy
Best for: Visual HTTP and HTTPS debugging, throttling, and mobile app testing.
Where Charles is stronger
Charles has a mature proxy workflow and can show readable HTTPS requests after its certificate is trusted.
Why TCP Viewer may fit better
Choose TCP Viewer for an open-source, native Mac packet workflow that also covers traffic outside HTTP.
Wireshark remains the broader choice for advanced analysis. tcpdump is better in scripts and remote shells. HTTP proxies are better when you need to read or change decrypted web requests. TCP Viewer focuses on a clear, native Mac packet workflow.
Proxyman, TinyShield, and TCP Viewer, together in one purchase.
Proxyman
TinyShield
TCP ViewerBundle pricing
From $138
or $183 for Lifetime
Every paid plan includes all PRO features. Team adds one shared company key and seats that can move between people in your organization.
| Feature | Free | Individual PRO | Team |
|---|---|---|---|
| Live packet capture | Trial access | Included | Included |
| Export and preview pcap/pcapng | Trial access | Included | Included |
| Packet inspection | Trial access | Included | Included |
| Packet Diff | 2 items | Unlimited items | Unlimited items |
| Wireshark-grade details | Trial access | Included | Included |
| Advanced structured filters | 1 filter row | Included | Included |
| TCP Viewer MCP | Not available | Included | Included |
| License Manager seats | Not available | Included | Included |
| Updates and support | Not included | Included | Included |
| Shared company key | Not included | Separate individual licenses | One key for the team |
| Additional seats | Not included | Purchase another license | $39 per added seat; update expiry stays unchanged |
| Transfer within your team | Not included | Move your existing Mac seats | Reassign seats between people in your organization |
| Offline verification | No license required | No periodic offline deadline | Connect at least once every 7 days |
Standard fits one Mac. Combo is the best value for two Macs. Lifetime Deal includes two seats and lifetime updates. Team gives your organization one shared key for five or more Macs, with one Mac per seat.
Not exactly. TCP Viewer is built for a focused native macOS workflow, while Wireshark remains a broad, mature packet analysis suite. TCP Viewer uses Wireshark libraries for deep details and keeps the day-to-day Mac experience lighter.
TCP Viewer supports capture filters, display-style narrowing, quick presets, and saved workflows for common packet investigations.
Yes. TCP Viewer can export a captured session as pcap or pcapng, and it can preview saved capture files later for review or sharing.
Yes. TCP Viewer is GPL-2.0-or-later open source, matching its Wireshark library integration and release source availability requirements.
Checkout is handled by Stripe. The website creates a checkout session with the TCP Viewer backend, then redirects you to Stripe-hosted Checkout.
Use the support links in the app or email the Proxyman Team. Include your macOS version, TCP Viewer version, and a short reproduction when possible.
Already have a license?
Use License Manager to receive a secure access link by email, or review an existing key before renewing update coverage.
A native packet viewer from the team behind Proxyman.
6+ years
The Proxyman Team has spent more than six years building network debugging tools.
800,000+
Developers worldwide use Proxyman, built by the same team as TCP Viewer.
GPL v2+
Read the source, build the app, or contribute on GitHub.
Native
Made for Apple Silicon Macs running macOS 15 or later.
3
Proxyman, Tiny Shield, and TCP Viewer come from the same team.
Get started
Download the app and see if it fits your packet workflow.
