Skip to Main Content
Solarwinds header logo
  • Bring IT all together

    Customers rely on SolarWinds to drive operational resilience, from unified observability to enterprise-wide service management, through a simple, powerful, and secure portfolio built for hybrid IT.

    Platform OverviewPlatform Overview
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure by DesignSolarWinds AI
    Monitoring and Observability

    World-class capabilities built for your hybrid IT ecosystem.

    NetworkInfrastructureDatabaseApplicationsDigital ExperienceLogsSecurity
    Monitoring and Observability Overview
    Database Observability

    Monitor, alert, triage, remediate, and prevent database issues from disrupting your business.

    MonitorDiagnoseOptimizeEverywhere
    Database Observability Overview
    Incident Response

    Build operational resilience and keep your systems online.

    Incident Response Overview
    IT Service Management

    Get teams back to work faster with an experience built for IT—and loved by users.

    Service ManagementAssets & CMDBAI & AutomationEnterprise Service Management
    IT Service Management Overview
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
  • Respond even faster

    SolarWinds helps teams respond faster through AI-Powered observability, database performance, incident response, and ITSM solutions. Let our products work hard so you don’t have to.

    All ProductsAll Products
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    Monitoring & Observability

    SolarWinds Observability Self-HostedSolarWinds Observability SaaSServer Application MonitorSecurity Event ManagerNetwork Performance MonitorNetFlow Traffic AnalyzerVirtualization ManagerNetwork Configuration ManagerIP Address ManagerAccess Rights Manager
    Database

    Database Performance AnalyzerSQL Sentry
    Incident Response

    SolarWinds Incident Response
    IT Service Management

    SolarWinds Service DeskWeb Help DeskDameware
    Tools

    Engineer's ToolsetKiwi Syslog ServerNetwork Topology MapperServ-U Managed File Transfer
    View Free Tools
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
  • Discover our solutions to your IT challenges

    Whether you want to stay ahead with new tech, speed up modernization, support modular services, cut costs, or stay competitive, we’ve built industry-leading software to maximize hybrid IT, spark innovation, and tackle your toughest IT challenges.

    All SolutionsAll Solutions
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    By Need

    Application Performance DevOpsIT Service ManagementNetwork Monitoring and ManagementCloud MigrationDigital Experience IT Asset ManagementUser Experience MonitoringDatabase ManagementInfrastructure MonitoringLog ManagementIT Automation
    By Technology

    AWSKubernetesPostgreSQLAzureMySQLSQL Server Diagnostics
    By Industry

    EducationPublic SectorEnterpriseSmall Business
    Partner Solutions

    Global System Integrators & MSPs
    View All Solutions
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
  • Pricing
  • We’re here to help you.

    With award-winning technical support, extensive documentation, comprehensive training, and tons of educational assets, we’re dedicated to your success. Plus, you can connect directly with product experts in our user community of over 200,000 registered members.

    Get Expert GuidanceGet Expert Guidance
    EXPLORE SOLARWINDS
    Interactive DemosPricingAbout UsSecure By DesignSolarWinds AI
    Partners

    Program OverviewBecome A PartnerFind a PartnerPartner Portal Login
    Resource Center

    NewsroomInvestor RelationsSolarWinds BlogTrust CenterResourcesGDPR
    Services & Support

    Customer SuccessDeployment ServicesPremium SupportTechnical DocsRenew MaintenanceSolarWinds Academy: Training & CertificationTechnical SupportReport a Security Incident
    Community

    THWACK SolarWinds User CommunityEventsPartners
    Not sure where to start?
    Get Expert GuidanceExplore ToolsRequest a QuoteVisit Our THWACK User Community
Contact Us
Request Quote
Solarwinds header logo
Skip to Main Content
  • Pricing
  • Customer Portal
  • THWACK®
  • Events
  • SolarWinds Blog
  • Public Sector
  • Contact Us
SolarWinds Footer Logo

SolarWinds was founded by IT professionals solving complex problems in the simplest way, and we have carried that spirit forward since 1999. We take pride in relentlessly listening to our customers to develop a deeper understanding of the challenges they face. Our digital agility solutions are built to help companies of any size accelerate business transformation today and into the future.

Try SolarWinds
  • Free Product Trials
  • All Tools
  • Interactive Demos
  • Preference Center
Security
  • Trust Center
  • GDPR Resource Center
  • Secure by Design
  • Security Information
For Customers
  • Customer Portal
  • Support
  • Documentation
  • THWACK Community
About SolarWinds
  • Company
  • Careers
  • For Government
  • For Investors
Resources
  • SolarWinds Blog
  • Resource Center
  • Knowledge Hub
  • Gartner® Magic Quadrant™ Observability
Try SolarWinds
  • Legal Documents
  • Privacy
  • California Privacy Rights
  • Web Accessibility Statement

©2026 SolarWinds Worldwide, LLC. All rights reserved.

Network Performance Monitor
  • View All Features
    Features
    • Network Monitoring Software
    • SNMP Monitoring
    • Network Diagnostic Tool
    • Lan Monitor
    • WiFi Analyzer
    • Wi-Fi Monitor
    • NetPath
    • Network Device Scanner
    • Network Performance Testing
    • Real-time Network Monitoring
    • Network Mapping Tools
    • Network Monitoring System
    • Network Troubleshooting Tools
    • SNMP Scanner
    • Network Latency
  • Pricing
    • Get a Quote
  • View All Resources
    Technical Resources
    • Datasheet
    • Admin Guide
    • Install Guide
    • Getting Started Guide
    • Documentation
    Educational Resources
    • Interactive Demo
    • Videos
    • SolarWinds Academy
    • Webcasts
    Connect with Us
    • SolarWinds Events
    • NPM Product Forum
    • Customer Service & Support
Network Performance Monitor
View all Network Performance Monitor use cases

Network Packet Analyzer

with Network Performance Monitor
Download Free TrialEmail Link to Trial
Fully functional for 30 days

A packet analyzer turns granular, real-time data into key network insights

Identify slowdowns to prevent end-user impact
Analyze real network latencies to identify bottlenecks before they affect end users.
Analyze packet metrics for over 1,200 applications
Capture a range of metrics pertaining to key business applications right out of the box.
Categorize traffic types across your network
View network information automatically sorted by category and risk level.
Ensure optimal end-user experience
Use the in-depth Quality of Experience (QoE) dashboard to manage network performance.
Set custom, automated packet scanner alerts
Network Performance Monitor (NPM) has automated alerts able to notify you when the packet scanner detects an issue.
Spot potential security threats
Leverage in-depth packet analysis to catch worrisome spikes in traffic.
Leverage a built-in network packet analyzer
Go beyond Wireshark limitations to gain a detailed picture of network packet traffic.
Gain access to an intuitive, centralized dashboard
NPM offers user-friendly tools to facilitate network performance management.

Identify slowdowns to prevent end-user impact

When end users experience slowdowns while using a network, the first question is always whether the underlying issue is with a specific application, or with the network as a whole. The packet scanner feature of SolarWinds® Network Performance Monitor helps provide a clear answer to this question, fast. NPM measures network path latency, or response time between client and server, to identify any bottlenecks or irregularities. This packet-level information provides admins with the most relevant metrics, including a pinpointed network location, network and application response time, traffic volume, and traffic count. This makes it easier to diagnose root causes and address issues before they further impact end-user connectivity. Additionally, admins can use the PerfStack™ performance analysis feature in NPM to drag and drop performance metrics onto a common timeline to visually correlate data and discover the root causes of end-user issues.
Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Analyze packet metrics for over 1,200 applications

SolarWinds packet analyzer software allows you to capture and utilize data from over 1,200 applications right out of the box. Admins can use this software to monitor all relevant applications, including business-critical programs, across their entire IT environment. You can also keep track of popular apps like Skype, SQL Server, and Facebook. The packet analyzer tool is built to focus on the metavalues of the applications rather than the full packet data, meaning unnecessary traffic data won’t take up space in your database. 
 
Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Categorize traffic types across your network

The network packet analysis tools in NPM are designed to not only capture and analyze packet data, but they can also automatically classify network traffic. The platform is built to display network traffic information according to category and provide an estimate of the risk level associated with this traffic. The analyzer categorizes traffic according to elements like source or destination IP address, port usage, application type, and volume. Admins can also identify how traffic flows over a specific network link or to servers or applications. Armed with these insights, admins can make informed decisions about capacity planning. The network packet analysis tools in NPM can make it easier to filter out worrisome levels of non-business traffic.
Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Ensure optimal end-user experience

While many network packet analysis tools only estimate network performance and, in turn, end-user experience, Network Performance Monitor pulls metadata from sensors across both physical and virtual servers to provide a realistic overview of current end-user conditions. Its unique Quality of Experience dashboard uses in-depth packet analysis to provide admins with key performance metrics.
Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Set custom, automated packet scanner alerts

Network packet analyzing is crucial for understanding current network status, which is why NPM is built to stay on top of changes by automatically polling for updates every five minutes. However, there’s no need to check NPM that often. You can use the automated network alert feature to catch issues immediately, so you can take action well before end users report slowdowns or security risks spread. The QoE dashboard can also immediately ping admins if application performance drops.

And don’t worry about alert overload—with NPM, it’s easy to customize your alerts to send notifications only on the metrics you’re concerned about. The platform also calculates dynamic baseline threshold data to help you avoid extraneous alerts. Just set up email alerts or Orion® SMS notifications on your mobile device, then use the platform’s configuration options to define the amount of information included in the alerts.

Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Spot potential security threats

Network packet analysis is intertwined with ensuring connectivity, but it’s also key for spotting potential security threats. Use NPM to catch abnormal traffic or spikes in data usage that could signal a security issue. The network packet analyzer in NPM is designed to provide insights into exactly how much traffic is crossing your network, both currently and historically. You can also use NPM to get at-a-glance insights into data volume and transaction volume according to application, and filter or create reports on the data as needed. 

Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Leverage a built-in network packet analyzer

NPM uses a built-in packet analyzer to capture data from sensors installed on managed Windows devices across a network. Since the tool only collects relevant metadata, it uses minimal bandwidth on Orion servers and nodes. NPM then turns this metadata into readable metrics, automatically updating this information to provide an accurate, evolving picture of on-premises, hybrid, and cloud services. Additionally, admins can use NPM to monitor logical components within a software-defined network (SDN) environment. 

Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Gain access to an intuitive, centralized dashboard


Network Performance Monitor provides an organized, user-friendly interface for managing packet analysis data. NPM makes it easy to drill down into individual devices or applications to access additional details with the ability to filter and provision items in groups or batches as well as set thresholds for color-coded insights and alerts.

Admins can also use the visual charts and graphs in SolarWinds NPM to quickly access an overview of current QoE status or to filter packet analysis findings to report on results. Use the default categorizations or customize charts and graphs to classify, display, and prioritize the metrics most relevant to your network management traffic.

Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More

Get More on Packet Analyzer

Do you find yourself asking…

  • What is the purpose of packet capture analysis?
  • How does a packet analyzer work?
  • Why is network packet analysis important?
  • How does packet analysis in NPM work?
  • What other network tool features does NPM have?
What is the purpose of packet capture analysis?

Admins use packet capture analysis, also known as deep packet inspection or network sniffing, to assemble an accurate overview of network health based on packet-level insights. This granular level of detail offers a realistic picture of the network’s current state. Capturing and analyzing packets yields statistics about network health, traffic flows, and bandwidth usage. Viewing updates on network traffic types and volume reveals how the network is currently being used and allows for capacity planning. Packet analyzers are also valuable for diagnosing network issues, checking configurations, and resolving slowdowns, as this level of analysis can reveal exactly when and where performance issues occur. Additionally, admins can use packet capture analysis to note spikes in traffic or unusual activity that could signal a security issue. When performed by an admin, this process can reveal information to facilitate precise troubleshooting. However, packet sniffing is also sometimes performed by hackers, who capture packets to steal or “eavesdrop” on sensitive information in transit, including usernames and passwords, email contents, and other private data. 

How does a packet analyzer work?

A packet analyzer intercepts network traffic and captures the in-transit data packets. Essentially, it can see all the information passing over the network by looking at each packet. A packet is simply a message split into its smallest possible parts to travel across a network. It’s broken down when sent and reassembled at the receiver node.  In general, a data packet is sent over a network with a header specifying its destination. Normally, only the intended recipient will read the packet. However, a packet analyzer doesn’t focus only on packets addressed to it — it looks at all the traffic to which it is given access. A packet scanner can capture all packets if set to perform unfiltered analysis, or it can filter to only capture only packets containing specific elements.  Packet analyzer software uses two common types of access methods to capture packets. The first is the test access point (TAP) method. A TAP is a hardware tool enabling network monitoring by transmitting “send” and “receive” packets on separate channels to the same device, ensuring simultaneous delivery. This method requires a physical device and connection, which can be costly. The second method is port mirroring, or switch port for analysis (SPAN). This method sends a copy of all network packets on one port to another port, where they’re subsequently analyzed. This method doesn’t affect the destination host’s connection. SPAN ports are part of Layer 2 and 3 network switches and require admin configuration during setup.  In some cases, packet capture analysis includes the full payload of the packet, tracking data like usernames, sites visited, applications used, and detailed contents of activities. However, effective packet analysis can also just capture the header and transaction information, collecting metadata for performance troubleshooting. For instance, by tracking and logging response time for packets sent between clients and servers, an analyzer can provide metadata about network and application traffic. Many packet analyzer tools then translate this information into a user-friendly form so admins can easily view and compare key network metrics like resource utilization and bandwidth usage. 

Why is network packet analysis important?

Network packet analysis is critical for network administrators, as it creates a central data source for effective network monitoring. By analyzing networks at the packet level, administrators gain a more specific and accurate understanding of network issues. Packet analysis is key because it provides a detailed overview of traffic across a network. It allows admins to both focus on a slowdown in packet response times between two managed nodes and better understand network performance.

Packet analysis can deliver a range of information depending on what administrators need to achieve effective network management. Typically, collecting metadata uses fewer resources while providing key stats on traffic volume, type, latency, and more. This process generates patterns, helping admins diagnose issues, avoid slowdowns, and prevent further end-user impact.

Packet analysis is also one of the most effective ways to quickly catch security threats and prevent unauthorized activity. A packet analyzer can flag unusual actions or alert admins to major shifts in traffic type and volume that could signal a breach. 

How does packet analysis in NPM work?

The packet analysis tool in Network Performance Monitor is designed to capture packets across your network using the SPAN port method and sensors installed on relevant servers. NPM has a light load, as it only captures packets’ metadata. NPM’s packet analysis feature can integrate with over 1,200 applications and calculate key stats, including response time, data volume, and traffic type.

You can use the step-by-step wizard to deploy server and network packet analysis sensors on any of the devices managed through the platform. The Quality of Experience dashboard within NPM provides at-a-glance summaries of performance metrics. Admins can use the dashboard’s default categorization or configure custom settings for the platform to automatically classify traffic and generate updated charts and dashboards. Admins can then filter the dashboard view, configure custom alerts, or drill down with a single click to view additional device information.

What other network tool features does NPM have?

SolarWinds packet analyzer software Network Performance Monitor offers a range of critical network management features building on and going beyond packet analysis. For instance, admins can create advanced alerts based on network topology and dependencies to help ensure they don’t miss critical state changes. NPM’s NetPath™ network path analysis feature offers admins hop-by-hop path visualization  beyond their internal business network. You can use the Wi-Fi heatmapping feature to create and update wireless connectivity maps reflecting real conditions. Troubleshooting is a snap with the PerfStack dashboard, where admins can drag and drop metrics for instant visual correlation. Additionally, NPM’s dynamic baseline threshold means you may be able to set more accurate alerts. If you’re looking for compatibility, NPM can help you cover your bases. The tool can manage domains with equipment from multiple vendors and can be used for on-premises, hybrid, and cloud environments. It’s also possible to monitor logical components of an SDN environment. 

  • What is the purpose of packet capture analysis?

    Admins use packet capture analysis, also known as deep packet inspection or network sniffing, to assemble an accurate overview of network health based on packet-level insights. This granular level of detail offers a realistic picture of the network’s current state. Capturing and analyzing packets yields statistics about network health, traffic flows, and bandwidth usage. Viewing updates on network traffic types and volume reveals how the network is currently being used and allows for capacity planning. Packet analyzers are also valuable for diagnosing network issues, checking configurations, and resolving slowdowns, as this level of analysis can reveal exactly when and where performance issues occur. Additionally, admins can use packet capture analysis to note spikes in traffic or unusual activity that could signal a security issue. When performed by an admin, this process can reveal information to facilitate precise troubleshooting. However, packet sniffing is also sometimes performed by hackers, who capture packets to steal or “eavesdrop” on sensitive information in transit, including usernames and passwords, email contents, and other private data. 

  • How does a packet analyzer work?

    A packet analyzer intercepts network traffic and captures the in-transit data packets. Essentially, it can see all the information passing over the network by looking at each packet. A packet is simply a message split into its smallest possible parts to travel across a network. It’s broken down when sent and reassembled at the receiver node.  In general, a data packet is sent over a network with a header specifying its destination. Normally, only the intended recipient will read the packet. However, a packet analyzer doesn’t focus only on packets addressed to it — it looks at all the traffic to which it is given access. A packet scanner can capture all packets if set to perform unfiltered analysis, or it can filter to only capture only packets containing specific elements.  Packet analyzer software uses two common types of access methods to capture packets. The first is the test access point (TAP) method. A TAP is a hardware tool enabling network monitoring by transmitting “send” and “receive” packets on separate channels to the same device, ensuring simultaneous delivery. This method requires a physical device and connection, which can be costly. The second method is port mirroring, or switch port for analysis (SPAN). This method sends a copy of all network packets on one port to another port, where they’re subsequently analyzed. This method doesn’t affect the destination host’s connection. SPAN ports are part of Layer 2 and 3 network switches and require admin configuration during setup.  In some cases, packet capture analysis includes the full payload of the packet, tracking data like usernames, sites visited, applications used, and detailed contents of activities. However, effective packet analysis can also just capture the header and transaction information, collecting metadata for performance troubleshooting. For instance, by tracking and logging response time for packets sent between clients and servers, an analyzer can provide metadata about network and application traffic. Many packet analyzer tools then translate this information into a user-friendly form so admins can easily view and compare key network metrics like resource utilization and bandwidth usage. 

  • Why is network packet analysis important?

    Network packet analysis is critical for network administrators, as it creates a central data source for effective network monitoring. By analyzing networks at the packet level, administrators gain a more specific and accurate understanding of network issues. Packet analysis is key because it provides a detailed overview of traffic across a network. It allows admins to both focus on a slowdown in packet response times between two managed nodes and better understand network performance.

    Packet analysis can deliver a range of information depending on what administrators need to achieve effective network management. Typically, collecting metadata uses fewer resources while providing key stats on traffic volume, type, latency, and more. This process generates patterns, helping admins diagnose issues, avoid slowdowns, and prevent further end-user impact.

    Packet analysis is also one of the most effective ways to quickly catch security threats and prevent unauthorized activity. A packet analyzer can flag unusual actions or alert admins to major shifts in traffic type and volume that could signal a breach. 

  • How does packet analysis in NPM work?

    The packet analysis tool in Network Performance Monitor is designed to capture packets across your network using the SPAN port method and sensors installed on relevant servers. NPM has a light load, as it only captures packets’ metadata. NPM’s packet analysis feature can integrate with over 1,200 applications and calculate key stats, including response time, data volume, and traffic type.

    You can use the step-by-step wizard to deploy server and network packet analysis sensors on any of the devices managed through the platform. The Quality of Experience dashboard within NPM provides at-a-glance summaries of performance metrics. Admins can use the dashboard’s default categorization or configure custom settings for the platform to automatically classify traffic and generate updated charts and dashboards. Admins can then filter the dashboard view, configure custom alerts, or drill down with a single click to view additional device information.

  • What other network tool features does NPM have?

    SolarWinds packet analyzer software Network Performance Monitor offers a range of critical network management features building on and going beyond packet analysis. For instance, admins can create advanced alerts based on network topology and dependencies to help ensure they don’t miss critical state changes. NPM’s NetPath™ network path analysis feature offers admins hop-by-hop path visualization  beyond their internal business network. You can use the Wi-Fi heatmapping feature to create and update wireless connectivity maps reflecting real conditions. Troubleshooting is a snap with the PerfStack dashboard, where admins can drag and drop metrics for instant visual correlation. Additionally, NPM’s dynamic baseline threshold means you may be able to set more accurate alerts. If you’re looking for compatibility, NPM can help you cover your bases. The tool can manage domains with equipment from multiple vendors and can be used for on-premises, hybrid, and cloud environments. It’s also possible to monitor logical components of an SDN environment. 

"With SolarWinds we have seen improvements in availability and reductions in time-to-resolution. We are able to rectify problems much faster, before users start complaining."
Michael Low
Systems Engineer
Marina Bay Sands

Resolve network and application issues with a packet analyzer

Network Performance Monitor

  • Translate network packet information into useful charts and graphs.
  • Captures and filter network traffic information according to your specifications.
  • User-friendly interface and alerts make it a snap to track packet data.

Starts at

NPM, an Orion module, is built on the SolarWinds Platform
Download Free TrialEmail Link to Trial
Fully functional for 30 days
Learn More
Let's talk it over.

Contact our team. Anytime.

Learn More About Our Popular Products

Automated User Provisioning
NTFS Permissions Report Tool
Active Directory Auditing Tool
Network Audit
IP Address Scanner
Network Troubleshooting
Server Monitoring Software
Virtualization Manager
Database Performance Monitoring
Service Desk
IT Help Desk
IT Asset Management

Explore More Resources

View All Resources