Download PacketSnitch

PacketSnitch is a desktop packet capture analysis tool distributed as a native installer for Linux and Windows. Every release ships three packages — one per target — and this page always links the latest version, with a SHA-256 checksum for each so you can verify what you downloaded before you install it.

Latest release

Release notes for this and every previous version →

All downloads for this version

The three packages above are the ones you want. The table below is the same release in full detail — exact filenames, byte sizes, and checksums — so you can copy a URL or a hash straight out of it.

Verify a download

Every release publishes a SHA256SUMS.txt manifest next to the packages. It uses the standard sha256sum format, so verification is one command on Linux (or certutil on Windows).

Linux — download the package and the manifest, then:

# Both files land in the current directory.
sha256sum -c SHA256SUMS.txt
# -> packetsnitch_3.3.0_amd64.deb: OK

To check a single file without the manifest, compare against the SHA-256 in the table above:

sha256sum packetsnitch_3.3.0_amd64.deb

Windows (PowerShell) — the SHA-256 of a file you downloaded to Downloads:

Get-FileHash "$env:USERPROFILE\Downloads\PacketSnitch-3.3.0-Installer.exe" -Algorithm SHA256

The result must match the SHA-256 in the table above, character for character. If it does not, do not run the installer — delete it and download again.

Install

The packages are self-contained: the Python backend, its third-party wheels, and the Electron frontend are all bundled, so no separate runtime install is required. Installing over an older version upgrades in place and keeps your saved sessions and settings.

Silent / unattended installs

Useful for fleet deployment:

# Debian / Ubuntu
sudo dpkg -i packetsnitch_<version>_amd64.deb

# Fedora / RHEL
sudo rpm -i packetsnitch-<version>-1.x86_64.rpm

# Windows (Squirrel installer, no UI)
PacketSnitch-<version>-Installer.exe --silent

On Windows, Squirrel installs per-user into %LOCALAPPDATA% by default and does not require an administrator prompt. See the FAQ for the elevation-handling details.

Release archive

Older versions stay available forever under a stable URL, so a pinned deployment or an air-gapped mirror can always fetch a specific build:

https://dl.packetsnitch.com/ps/<MAJOR.MINOR>/

For example, every 3.3.x build lives at https://dl.packetsnitch.com/ps/3.3/. The <MAJOR.MINOR> directory contains the .deb, .rpm, and .exe for each patch release, plus that version’s RELEASE_NOTES.txt and SHA256SUMS.txt, and a plaintext RELEASE file — the same notes the desktop app’s Settings → About terminal downloads for the version it is running.

The canonical “what is the newest version” marker is always:

https://dl.packetsnitch.com/ps/ver.txt

Which package do I want?

Not sure whether your license covers a second machine? See the Store and the management portal.

Still stuck?

• Documentation — backend, frontend, plugins, filters, and decoders.
• FAQ — installation, building from source, licensing, and privacy.
• support@packetsnitch.com — anything else.