Zui
Zui: A free, cross-platform desktop analyzer for PCAP, Zeek, Suricata, and Zed lakes. Ranked #14 of 30 in Network Protocol Analyzers by our editors (7.8/10); pricing: Free plan; best for PCAP investigations with Zeek and Suricata.
At a glance
- Editor score7.8 / 10
- PricingFree plan
- Best forPCAP investigations with Zeek and Suricata
- Free planYes
- Paid fromFree
- DeploymentBoth
- Facts checked20 Sep 2026
Where it wins
- Correlates Zeek events with Suricata alerts
- Includes flow diagrams, pivots, queries, and PCAP export
- Runs on Windows, macOS, and Linux at no cost
Where it doesn't
- Network capture is limited to local data
- The release is described as legacy
- Remote Zed access is not remote interface capture
Our verdict on Zui
Zui is a free desktop application for exploring, querying, and analyzing Zed lakes and packet-capture data. It is aimed at analysts investigating PCAP files with Zeek and Suricata, as well as teams working with local or remote Zed lake data. Zui runs on Windows, macOS, and Linux, and imported PCAP files and flow indexes remain local to the workstation.
Its strongest capability is the bundled PCAP workflow. Brimcap processes captures, generates Zeek and Suricata summary logs, and correlates Zeek events with Suricata alerts. Connection-lifecycle ladder diagrams, flow extraction, and PCAP export help move from broad traffic review to selected evidence. Drag-and-drop ingestion, schema inference, filters, pivots, named queries, and query workflows support repeatable investigation. The ecosystem also includes Zeek, Suricata, VirusTotal, whois, Wireshark, and Zed lakes, while bundled command-line tools include zed, zq, and brimcap.
Zui fits teams that want a no-cost, cross-platform desktop interface combining packet analysis with Zed lake exploration. Its remote-lake capability provides access to remote Zed data, but it is distinct from remote network-interface capture; the published capture model is local. Brim Data describes Zui as a legacy release while focusing development on SuperDB, although Zui documentation and downloads remain published. Choose Zui when its integrated PCAP, Zeek, Suricata, flow, and query workflow matches an existing environment. Choose another option when active remote capture or a product under primary ongoing development is a requirement.
Your product? Our editors can test Zui in depth and publish a review, labelled as paid · from $149/mo →
Zui pricing
Zui fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Deployment | Both |
| Capture sources | Local |
| PCAP support | Yes |
| Traffic decryption | Not verified |
| CLI tools | Yes |
| Remote capture | Not verified |
| Flow analysis | Yes |
| Deployment | Desktop, Self-hosted |
| Platforms | Windows, macOS, Linux |
| Support | Community, Docs |
| Built for | Solo, Small business, Mid-market (editorial estimate) |
| Integrations | 6 integrations: Zeek, Suricata, VirusTotal, whois, Wireshark, Zed lakes |
| Pricing | Free plan |
| Website | zui.brimdata.io |
| Facts checked | 20 Sep 2026 |
Zui integrations
Zui lists 6 integrations on its own site.
- Zeek
- Suricata
- VirusTotal
- whois
- Wireshark
- Zed lakes
Alternatives to Zui
- WiresharkA broad, free desktop analyzer for live captures, PCAP files, filtering, and protocol inspection.9.4
- TSharkA free, scriptable Wireshark-based analyzer for live captures, PCAP files, and protocol workflows.9.2
- ScapyA free, programmable toolkit for crafting, capturing, decoding, and analyzing packets.9.0
Also Ranked In
Zui is ranked in 2 of our directories.
Used Zui? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Zui for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Zui is listed in our Network Protocol Analyzers directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/zui/"><img src="https://www.itechguides.com/best/badge/zui.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update