xplico
Network Forensic Analysis Tool (NFAT)
Platforms: Linux · Last verified September 6, 2026
The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email (POP, IMAP, and SMTP protocols), all HTTP contents, each VoIP call (SIP, MGCP, H323), FTP, TFTP, and so on. Xplico is not a network protocol analyzer.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on Kali Linux with `sudo apt install xplico`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.
