A RedEye Networks product

Free visual traceroute is finally here. And a massive troubleshooting toolkit for network engineers.

See the whole route, not a wall of text — every hop, every ECMP path, the exact latency and loss on each edge. Then keep going — everything else an engineer reaches for: iperf, SNMP, multicast, Layer 2, MAC lookup, routing, Nmap and fleet monitoring, all in one portable EXE. No install. No account. No cost.

Download for Windows See all downloads

Free — no account, no trial, no credit card.

winget install RedEyeNetworks.HopMatrix
One EXE · eight modes Windows x64 & ARM64 Linux x64 macOS · Apple Silicon ~50 MB single file No install Authenticode-signed + VirusTotal
A live multi-path trace in HopMatrix — IPv4 and IPv6 side by side. Click to zoom.
Free — and here’s why.

We’re a group of network engineers at RedEye. We built HopMatrix because the tools we wanted didn’t exist or cost too much — so we’re sharing it instead of selling it. From one group of geeks to another, we hope it’s awesome and it helps. The full story  ·  FAQ: what’s the catch?

One app instead of ten

All your network tools — in one window that finally works together.

Traceroute, bandwidth, SNMP, multicast, Layer 2, MAC lookup, routing, Nmap and fleet monitoring — HopMatrix puts every one of them in a single portable window that shares one session, one history and one export. Right-click a hop to scan it. Spot a bad link and trace it. No ten tools, no spreadsheet, no context-switching.

The problemThe old wayHopMatrix
Where is the latency?WinMTR — single path, no historyMulti-path topology, delta latency on every edge, time-scrubber replay, IPv4 + IPv6
Is the link saturated?Separate iperf3 binary + CLIIntegrated iperf3 client and server, sparklines, bidirectional testing
What is on this switch port?Console cable + show cdp neighborsL2 Inspector: live CDP / LLDP / STP BPDU / ARP via Npcap
Which devices respond to SNMP?Manual snmpwalk + spreadsheetSNMP subnet discovery + walk, 117 MIB mappings, 25+ presets, v1/v2c/v3
Is multicast working?Wireshark + manual decodeJoin groups, capture all multicast, 17 protocol decoders, PCAP export
What vendor is this MAC?Web lookup, one at a time57,000-entry IEEE database, bulk-parse an entire ARP table
Where does this route go?show ip route, then trace it by eyePaste show ip route; look up any destination and see its egress interface, next hop and equal-cost paths
What ports are open?Separate Nmap install + CLIIntegrated Nmap, multiple scan profiles, right-click any hop
Monitor 200 endpoints?Expensive commercial NMS256-endpoint dashboard (up to 1024), alerts, sparklines, health scores

Eight modes, one window

Everything you reach for, in a single portable EXE

Each mode is a full tool in its own right — and they share one interface, one session history, and one export path.

Visual multi-path traceroute

A true visual network trace — watch every path, not just the one that answered first, and see exactly which hop adds the latency.

  • Multi-stack (IPv4 + IPv6), multi-protocol (ICMP / UDP / TCP) traceroute with ECMP awareness
  • Delta latency on every edge; per-hop sparklines with loss ticks
  • Time-scrubber replay; routing-loop, ECMP-mixed and rate-limit detection in plain English

Native bandwidth testing (iperf3)

Real TCP/UDP throughput with no separate iperf3 binary — client and server in the same EXE.

  • Clean-room iperf3 wire protocol, verified against iperf3 3.20
  • 51 Gbps combined on loopback; up to 128 parallel streams; IPv6, DSCP marking
  • Dual-color upload/download sparklines with real Mbps labels

SNMP discovery + MIB walk

Find every SNMP-responsive device on a subnet, then walk it — v1, v2c and v3 with full auth/priv.

  • Concurrent CIDR discovery; auto-classifies vendor from sysObjectID
  • 117-entry embedded MIB dictionary; 25+ walk presets
  • Right-click a host to walk it, open in Trace, or add to Monitor

Multicast troubleshooting

Join any multicast group and see what is actually on the wire, decoded — real multicast troubleshooting without a manual capture.

  • 17 protocol decoders: IGMP, mDNS, SSDP, PIM, HSRP, VRRP, OSPF and more
  • Full-frame hex dump; PCAP export straight into Wireshark
  • Browsable mDNS service cache

Layer 2 inspector

See what the switch actually says about itself — without a console cable.

  • Live CDP, LLDP, STP/RSTP BPDU and ARP capture via Npcap
  • Native VLAN detection; full RSTP BPDU decode; 802.1Q tags
  • PID / VID / serial from CDP; L2 PCAP export

Bulk-parse switch ARP and MAC tables

Resolve MAC vendors instantly — even air-gapped. Paste a raw table, get every vendor back.

  • 57,000+ IEEE OUI entries embedded — zero network dependency
  • Bulk-parse raw show ip arp / show mac address-table output
  • Filter + CSV export; flags multicast, broadcast and locally-administered

Routing-table analyzer

Paste show ip route from a Cisco IOS / IOS-XE box and see exactly how it forwards — parsed locally, with no live access to the device.

  • Look up any destination: longest-prefix match, egress interface and next hop — ECMP-aware, every equal-cost path listed
  • Reads protocol, AD, metric, age, flags and VRF per route; finds the gateway of last resort
  • Filter a full table in place; tells you plainly how many lines it couldn’t parse, and never guesses

Fleet monitoring with multi-ping

Keep an eye on the whole fleet in one grid — multi-ping across hundreds of endpoints with alerts, sparklines and health scores.

  • 256 endpoints by default, configurable up to 1024 (ICMP, TCP or NTP)
  • Discover targets by sweeping a subnet as wide as a /22
  • Alert thresholds on RTT, loss, jitter; double-click a row into a full Trace

And the quick tools you keep reaching for

Traffic Generator (to 10 Gbps)Path MTU DiscoveryBurst Probe Cisco Remote Capture (ciscodump over SSH)Subnet Calculator (IPv4 + IPv6) WhoisLocal Route TableHosts File ViewerListening PortsLocal ARP TableIntegrated Nmap (right-click a hop)

See it in action

Real screens, not mockups

Every mode lives in one window. This is what HopMatrix actually looks like on a live network — click any screen to enlarge.

Visual multi-path tracerouteMulti-path topology with per-hop latency, loss and replay.
Native bandwidth testing (iperf3)Client and server in one EXE — no separate binary.
SNMP subnet discoveryScan a CIDR, then right-click a host to walk, trace or monitor it.
SNMP MIB walkWalk any device with 117 embedded MIB mappings.
Multicast troubleshootingJoin groups, decode 17 protocols, export PCAP.
Layer 2 inspectorSee what the switch says — no console cable.
Bulk-parse ARP & MAC tables57,000-entry IEEE OUI database — works offline.
Routing-table analyzerPaste show ip route; see how the box forwards any destination.
Fleet monitoring with multi-pingUp to 1024 endpoints with alerts and health scores.

Built to be trusted on production networks

Real engineering, not a weekend script

Truly cross-platformWindows 10/11 x64 + ARM64, Linux x64 and macOS on Apple Silicon — one codebase, one Avalonia UI.
Single-file, zero installA self-contained ~50 MB binary. No runtime to deploy, portable off a USB stick, no admin for basic use.
2,660+ automated testsAn xUnit suite with a CI-enforced coverage floor, plus a runtime self-test that exercises the full app end-to-end.
Signed and scannedWindows builds are Authenticode-signed via Azure Trusted Signing; every stable release is auto-submitted to VirusTotal.
Ships through wingetInstall with a single command, and upgrade with winget upgrade.
Fresh data every releaseEmbedded IEEE OUI, Team Cymru ASN and db-ip GeoIP databases refresh at every tag — so lookups work offline and stay current.

The honest answer

Why is it free?

Because we built it for ourselves first.

We're a crew of hardcore network engineers at RedEye, and the tool we actually wanted — one window that could trace a path, test the link, walk SNMP, decode multicast, read a switch port and watch a fleet, all in the same session — either didn't exist or cost more than it was worth. So we stopped waiting and built it for our own team.

Once it was good, putting a price tag on it felt small. We'd rather hand something genuinely useful to every engineer who's ever juggled ten tools and a spreadsheet at 2 a.m. than try to score a few bucks on it. No account, no trial timer, no “Pro” tier holding features hostage — because we're all on the same side of the console, whatever logo is on the badge.

From one group of geeks to another — we hope it’s awesome, and we hope it helps.

— The engineers behind HopMatrix, at RedEye Network Solutions

  • No account, everNo sign-up, no email, no license key. Download the binary and run it.
  • You're not the productNo ads, no bundled junk. Run it fully offline or air-gapped with --airgap and nothing leaves your machine.
  • Free, and staying that wayFree for personal and internal business use — no bait-and-switch paywall waiting in a later release.

Download HopMatrix

Free. No account. Just download and run.

Download for Windows (x64) Per-user installer · ~89 MB · Authenticode-signed

Windows 10/11 (x64)

64-bit Intel / AMD
Installer Portable EXE Machine-wide installer

Recommended · per-user options need no admin; machine-wide installs for everyone (admin).

Windows on ARM

ARM64 — Surface, Snapdragon
Installer Portable EXE Machine-wide installer

Per-user options need no admin; machine-wide installs for everyone (admin).

Linux (x64)

Self-contained binary
Download binary

chmod +x HopMatrix-linux-x64 && ./HopMatrix-linux-x64

macOS (Apple Silicon)

Apple Silicon only — M1 / M2 / M3 / M4
Disk image (.dmg) Tarball (.tar.gz)

Developer ID signed & notarized. Intel Macs are not supported.

winget install RedEyeNetworks.HopMatrix
See the full changelog

Every stable build is Authenticode-signed and automatically scanned on VirusTotal, with SHA-256-keyed links in the release notes.

Questions, answered

FAQ

How much does HopMatrix cost?
HopMatrix is free of charge for personal and internal business use — no account, no trial, no credit card. The license is proprietary: modification, redistribution and derivative works are not permitted.
Why is it free? What’s the catch?
There’s no catch. We built HopMatrix for our own engineers at RedEye — the tool we wanted either didn’t exist or cost more than it was worth — and we decided sharing it beats trying to score a few bucks on it. No account, no ads, no trial timer and no “Pro” tier holding features hostage; run it fully offline or air-gapped and nothing leaves your machine. It’s free for personal and internal business use, and it stays that way. Read the longer answer.
Does HopMatrix bundle Nmap or Npcap?
No. Both are external and installed separately if you want the features that depend on them — Nmap for integrated scanning and Npcap for the L2 Inspector capture. Everything else works without them.
Does the Routing Analyzer connect to my router?
No. You paste the output of show ip route from a Cisco IOS / IOS-XE device and HopMatrix parses that text locally — nothing connects to the device. It shows how the box would forward any destination you look up (longest-prefix match, egress interface, next hop and every equal-cost path), and it tells you plainly how many lines it couldn’t parse rather than guessing.
Do I need admin or root?
Not for most things. ICMP traceroute, iPerf, SNMP, MAC lookup, the subnet calculator and the read-only quick tools need no elevation. Elevation is required for UDP/ECMP (Paris) and TCP SYN probing, custom DSCP marking, and packet recording. Privilege-gated features are marked, with a one-click restart-elevated option.
Which platforms are supported?
Windows 10/11 (x64 and ARM64), Linux x64 and macOS on Apple Silicon (M-series) are all available now. macOS builds are Developer ID signed, notarized and stapled; Windows builds are Authenticode-signed via Azure Trusted Signing. Intel-based Macs are not supported.
Portable vs installer vs machine-wide installer — which do I want?
Portable EXE — download, drop on a USB stick, run. No install, no registry writes. Per-user installer — winget-friendly, no admin, adds hopmatrix to your user PATH. Machine-wide installer — one install for every user on the box. All are signed and byte-identical to the copies scanned on VirusTotal.
How do updates work?
HopMatrix checks for updates in-session and shows a banner when a new stable release is out. The Download button always fetches the current release through the evergreen download.redeyenetworks.com mirror. On Windows, winget upgrade works too. Update checks can be disabled, and the whole app runs offline.
Can I run HopMatrix air-gapped or offline?
Yes. Launch with --airgap (or toggle it in Settings) to suppress all external enrichment endpoints. Offline lookups keep working because the OUI, ASN and GeoIP databases are embedded in the binary and refreshed at release time. System DNS to internal resolvers is preserved.
Can I automate HopMatrix from the command line?
Yes. hopmatrix 8.8.8.8 opens the GUI and starts tracing; hopmatrix 1.1.1.1 8.8.8.8 opens one tab per target. Every mode has a launcher (--iperf, --snmp, --multicast, --l2, --oui, --subnet, -m) with probe modifiers and bulk import options. A bad value exits with the list of valid ones.

Actively developed

What's new

HopMatrix ships fast. Here's what landed in recent releases.

Loading the latest releases…