NetFett 0.1.0

First public release of NetFett – a full-featured network monitor and protocol analyzer for Windows, written in pure Python with a PySide6 interface. Captures traffic via a raw socket – no Npcap/WinPcap required.

Highlights

• Live capture (IPv4/IPv6) with packet list, layer details, hex and payload view
• Dissectors for DNS, DHCP, NTP, QUIC, TLS, HTTP, HTTP/2 (HPACK), SMB2, SIP, RTP, SMTP/POP3/IMAP, FTP, SSH
• Display filters, coloring rules, live charts (throughput, protocols, programs, top talkers)
• Analysis: conversations, Follow TCP Stream, expert info (scans, beaconing, DNS tunneling, TLS hygiene …), DNS analysis, topology, device scan
• TLS decryption with SSLKEYLOGFILE, JA3/JA3S, object extraction, IOC matching
• PCAP/PCAPNG open, merge, save; CSV/JSON export
• User interface in English and German (View → Sprache / Language)

Download

NetFett-0.1.0-win64.exe – single file, no installation, no Python needed.

• Live capture requires administrator rights (Capture → Restart as Administrator…). Opening PCAP files works without.
• The exe is not code-signed, so Windows SmartScreen may warn on first start: More info → Run anyway.
• SHA-256: b8a7490b89e38b6c060c20d1db66b175dae8edb7b5b8ddd272c91ab97e342c97 (also in NetFett-0.1.0-win64.exe.sha256)

License

MIT – see LICENSE. The executable bundles Qt/PySide6 (LGPL-3.0) and other components, see THIRD-PARTY-NOTICES.md.