Choose the license that fits your Mac setup. All plans include the full TCP Viewer feature set with one-time pricing.
$24/once
For one Mac
$29/once
Best value for two Macs
$59/once
For long-term use
For teams and companies
Give every Mac the full TCP Viewer PRO feature set. Manage one shared license and move seats between people in your organization.
$39per seat
One-time payment.
$195 total
TCP Viewer comes from the same indie Mac team behind Proxyman and Tiny Shield: real products, real users, and practical support from people who build debugging tools every day.
Secure checkout powered by Stripe.
7-day refund policy.
TCP Viewer is a newer, Mac-only packet viewer. It does not replace every network tool. It gives Mac users a focused way to capture, understand, and share packets.
Why TCP Viewer
The main capture UI is built with AppKit for a fast, familiar Mac experience.
PcapPlusPlus handles packet capture, parsing, and pcap or pcapng files.
libwireshark provides deep protocol dissection inside the simpler Mac interface.
Overview, Endpoints, app groups, and domain groups help you find the busy traffic first.
Read the GPL-2.0-or-later source, report an issue, or contribute on GitHub.
Mature analysis suite
Best for: Deep protocol analysis on macOS, Windows, and Linux.
Full comparisonWhere Wireshark is stronger
Wireshark has been developed since 1998. It covers more analysis tools, statistics, protocols, and expert workflows.
Why TCP Viewer may fit better
Choose TCP Viewer for a smaller AppKit interface, quick capture summaries, and grouping by app or domain on your Mac.
Where tcpdump is stronger
tcpdump is light, scriptable, and works well when you do not need a desktop interface.
Why TCP Viewer may fit better
Choose TCP Viewer when you want a packet table, decoded fields, hex view, charts, search, and saved capture files in one window.
Intercepting proxy
Best for: Reading, changing, replaying, or scripting HTTP and HTTPS flows.
Full comparisonWhere mitmproxy is stronger
mitmproxy can edit decrypted application traffic after you route it through the proxy and trust its certificate.
Why TCP Viewer may fit better
Choose TCP Viewer for packet-level DNS, TCP, UDP, and TLS capture without turning the app into an HTTP proxy.
HTTP debugging proxy
Best for: Visual HTTP and HTTPS debugging, throttling, and mobile app testing.
Where Charles is stronger
Charles has a mature proxy workflow and can show readable HTTPS requests after its certificate is trusted.
Why TCP Viewer may fit better
Choose TCP Viewer for an open-source, native Mac packet workflow that also covers traffic outside HTTP.
Wireshark remains the broader choice for advanced analysis. tcpdump is better in scripts and remote shells. HTTP proxies are better when you need to read or change decrypted web requests. TCP Viewer focuses on a clear, native Mac packet workflow.
Proxyman, TinyShield, and TCP Viewer, together in one purchase.
Proxyman
TinyShield
TCP ViewerBundle pricing
From $138
or $183 for Lifetime
Every paid plan includes all PRO features. Team adds one shared company key and seats that can move between people in your organization.
| Feature | Free | Individual PRO | Team |
|---|---|---|---|
| Live packet capture Capture TCP and UDP traffic from supported local interfaces. | Trial access Evaluate the capture workflow in the free trial state, with the app clearly marked as trial. | Included Use native packet capture as part of your licensed daily debugging workflow. | Included Use native packet capture as part of your licensed daily debugging workflow. |
| Export and preview pcap/pcapng Export a live session as .pcap or .pcapng, then reopen saved captures for repeatable analysis. | Trial access Try the file workflow before deciding whether TCP Viewer fits your Mac setup. | Included Keep captures, share traces, and move between live sessions and saved capture previews. | Included Keep captures, share traces, and move between live sessions and saved capture previews. |
| Packet inspection Browse decoded packet details, byte ranges, and protocol fields. | Trial access Inspect the experience and UI depth before activating a license. | Included Use the packet table, inspector, field view, and hex view without trial limits. | Included Use the packet table, inspector, field view, and hex view without trial limits. |
| Wireshark-grade details Protocol dissection is built on libwireshark for familiar field-level depth. | Trial access Review the dissection quality and packet tree in the unpaid app state. | Included Rely on deep protocol details inside a focused native macOS workflow. | Included Rely on deep protocol details inside a focused native macOS workflow. |
| Advanced structured filters Build focused TCP/UDP investigations with structured filter rows and quick narrowing. | Limited Use the first structured filter row to try the flow; adding more rows opens the PRO paywall. | Included Create multi-rule structured filters for repeatable investigations and less packet noise. | Included Create multi-rule structured filters for repeatable investigations and less packet noise. |
| TCP Viewer MCP Connect an MCP client such as Codex to inspect capture status, interfaces, and packets with natural-language prompts. | Not available MCP access is reserved for TCP Viewer PRO licenses. | Included Use TCP Viewer MCP to bring live packet capture context into your AI-assisted workflow. | Included Use TCP Viewer MCP to bring live packet capture context into your AI-assisted workflow. |
| License Manager seats Register this Mac and manage active devices from the License Manager portal. | Not available No registered device seat is attached to the free app state. | Included Activate Standard, Combo, or Lifetime and revoke old devices when you need to move seats. | Included One company key, 5–100 seats, and devices grouped under the team license. |
| Updates and support Use builds covered by your license update window and get help by email. | Not included Free users can still inspect the open-source project, but paid support is not included. | Included Standard and Combo include 1 year of updates; Lifetime Deal includes lifetime updates. | Included One year of updates, with optional renewal at $29 per seat for all seats. |
| Shared company key Assign seats to Macs throughout your organization. | Not included | Separate individual licenses | One key for the team |
| Additional seats Grow the same license when another person joins. | Not included | Purchase another license | $39 per added seat; update expiry stays unchanged |
| Transfer within your team Revoke an old Mac and activate a replacement. | Not included | Move your existing Mac seats | Reassign seats between people in your organization |
| Offline verification An internet connection is required for activation. | No license required | No periodic offline deadline | Connect at least once every 7 days |
Standard fits one Mac. Combo is the best value for two Macs. Lifetime Deal includes two seats and lifetime updates. Team gives your organization one shared key for five or more Macs, with one Mac per seat.
Not exactly. TCP Viewer is built for a focused native macOS workflow, while Wireshark remains a broad, mature packet analysis suite. TCP Viewer uses Wireshark libraries for deep details and keeps the day-to-day Mac experience lighter.
TCP Viewer supports capture filters, display-style narrowing, quick presets, and saved workflows for common packet investigations.
Yes. TCP Viewer can export a captured session as pcap or pcapng, and it can preview saved capture files later for review or sharing.
Yes. TCP Viewer is GPL-2.0-or-later open source, matching its Wireshark library integration and release source availability requirements.
Checkout is handled by Stripe. The website creates a checkout session with the TCP Viewer backend, then redirects you to Stripe-hosted Checkout.
Use the support links in the app or email the Proxyman Team. Include your macOS version, TCP Viewer version, and a short reproduction when possible.
Already have a license?
Use License Manager to receive a secure access link by email, or review an existing key before renewing update coverage.
A native packet viewer from the team behind Proxyman.
6+ years
The Proxyman Team has spent more than six years building network debugging tools.
800,000+
Developers worldwide use Proxyman, built by the same team as TCP Viewer.
GPL v2+
Read the source, build the app, or contribute on GitHub.
Native
Made for Apple Silicon Macs running macOS 15 or later.
3
Proxyman, Tiny Shield, and TCP Viewer come from the same team.
Get started
Download the app and see if it fits your packet workflow.
