Tracexy for MAC
Free, open-source packet analyzer for Mac: groups live traffic and PCAP files into app-aware sessions. Free Community edition, paid Pro upgrade.
Tracexy Overview
Tracexy is a native macOS packet analyzer for live network traffic and saved PCAP or PCAPNG files. Instead of starting from a long list of packets, it groups traffic into sessions and connects them to the Mac app that made them when macOS provides that information, so you can see which process contacted which host, which protocols appeared and how much data moved. Decoded fields and raw bytes stay one click away. Missing evidence is shown as unknown rather than guessed.
Tracexy comes from Rockxy LLC and its public source is under the AGPL-3.0-or-later license. The notarized Community download is free and covers live and saved captures, sessions, Findings, local History and protected export, with limits of 3 Projects, 8 workspace tabs and 12 filter rules. Pro is a paid license from $18 that adds capture comparison, batch analysis, scheduled capture, reports and more capacity. Version 0.9.2 adds license activation to the official download. It needs macOS 14 or later. Opening saved files needs no extra setup, while live capture needs a one-time approval of a privileged helper in System Settings. Tracexy does not intercept HTTPS; encrypted content is only readable with TLS key logs you supply. Capture files can contain passwords and private data, so capture only networks and devices you are authorized to use, and review files before sharing them.
Key Features
Tracexy follows a network problem from the app to the packet.
- Live capture: choose an interface, set a BPF filter and limit retention.
- PCAP and PCAPNG: open saved captures and export raw ones.
- App-aware sessions: traffic grouped by conversation, with best-effort process names.
- Protocol decoding: DNS, TLS, HTTP, SIP, RTP, SMB and more.
- Findings: TCP, DNS, TLS and ICMP problems linked to the frames behind them.
- Projects: separate investigations with their own settings and saved captures.
- Local by default: captures stay on your Mac unless you export them.
- Protected export: session files that omit raw packet bytes and sensitive metadata.
What’s New in Version 0.9.2
Tracexy 0.9.2 is a small fix for Pro license activation.
- The official macOS download now includes Settings → License, so purchased Pro keys can be activated
Tracexy FAQ
Is Tracexy free?
Yes, the Community edition is free and its source is public under AGPL-3.0-or-later. A paid Pro license, from $18, adds more features and capacity.
What does Tracexy Pro add?
Capture comparison, cross-capture History search, batch analysis, scheduled capture, custom finding rules, HTML and PDF reports, reusable redaction profiles, advanced I/O graphs and more Project capacity.
What are the limits of the Community edition?
Community includes 3 Projects, up to 8 workspace tabs, 5 focus sets, 5 pinned hosts and 12 filter rules, with no direct support.
Which version of macOS does Tracexy need?
macOS 14 or later.
Does Tracexy need administrator access?
Opening PCAP and PCAPNG files does not. Live capture needs a one-time approval of its privileged helper in System Settings.
Can Tracexy read HTTPS traffic?
It does not intercept HTTPS or install a certificate. The official app can use TLS key logs or PCAPNG Decryption Secrets you supply, for supported captures.
Does Tracexy upload my captures?
No. Captures and sessions stay on your Mac by default, and exporting or sharing is something you choose to do.
How is Tracexy different from Wireshark?
Tracexy focuses on native Mac, app-aware, session-first investigation, while Wireshark offers broader specialist protocol depth. PCAP and PCAPNG files can move between the two.
Can I install Tracexy with Homebrew?
Yes: brew install --cask tracexy.
Where does the Tracexy download on tracexy.FULLMAC.app come from?
The download button leads to the official Tracexy page at https://rockxy.io/tracexy. tracexy.FULLMAC.app does not change or repackage the app.
Similar Apps
OrbStackOrbStack is a fast, light and simple way to run Docker containers and Linux machines on your Mac. It is a drop-in replacement for Docker Desktop: your docker and docker compose commands keep working, and on first start OrbStack offers to copy over your existing Docker Desktop containers, images and volumes. It starts in seconds, uses less than 0.1% background CPU on Apple Silicon and returns unused memory to macOS. Besides containers it runs full Linux machines from 16 distributions, and a lightweight Kubernetes cluster for local development. OrbStack is made by Orbital Labs.Developer Tools
QuotaBarIf you use OpenAI Codex with a ChatGPT account, the usage limits reset on a 5-hour and a weekly window, and checking how much is left means opening Codex or ChatGPT. QuotaBar puts the remaining percentage in the Mac menu bar and refreshes it every 60 seconds. Click the icon for a detailed panel with every limit window and its reset countdown, or turn on a small floating HUD that stays on top of other windows.Developer Tools
Stargazer BarStargazer Bar is a small native menu bar app for Mac that keeps an eye on GitHub repositories for you. It puts a live star count in the menu bar, so you can see how a project is doing without keeping a browser tab open, and a click opens a dropdown with the details: star and fork trend charts, release download totals and a maintainer radar. Public repositories are measured by their stars. Private repositories, which have no stars, are measured by what needs your attention: a failing build, an unanswered issue or a new pull request.Developer Tools
Notch So GoodNotch So Good turns the notch of your MacBook into a small status display for AI coding agents. While Claude Code or the OpenAI Codex CLI works, a black pill extends the notch: a 3D character called Peek sits on the left, and a ring on the right shows how much of your 5-hour usage window is left. The more a session needs you, the further Peek climbs out. When a task finishes, fails or runs into a usage limit, the notch opens into a card that says what happened and in which project, and a click jumps to the exact terminal tab, tmux pane included.Developer Tools
Claude UsageClaude Usage is a small native app for people who use Claude Code. In the menu bar it shows your current five-hour session, your weekly usage for all models and for Sonnet, and your pay-as-you-go credits, each with a usage bar and its reset time, without opening Claude Code. It also adds a one-line readout under your Claude Code prompt with the model, how full the context window is and the tokens used, so you can compact a session before it runs out of room. Each terminal pane shows its own readout, also across tmux.Developer Tools
TintpadTintpad is a free, open-source launcher for developers who work with command-line coding agents such as Claude Code and Codex. Press Option-Command-Space anywhere and a black drop falls out of your Mac's notch, or hangs below the menu bar on Macs without one, with your repositories inside. Type a few letters, press Return, and your own terminal opens at that repository with the agent already running, in the mode you used there last.Developer Tools
FULLMAC.app does not host this app. Download buttons lead to the developer’s own pages.