wingetCollections
  • Auto
  • Search
  • Awesome Collections
  • Awesome Programs
  • My Favorite Collections
  • My Collections
  • Account / Settings
  • Terms of Service
  • Privacy
  • About
  • What is WinGet?

© 2026 winget.ragerworks.com

Loading...
  1. Go back
  2. Packages
  3. hopscout
hopscout logo

hopscout hopscout contributors

cli latency mtr networking ping traceroute
Use this command to install hopscout:
winget install --id=ABowlOfEleven.hopscout -e

Hopscout is a live traceroute and network monitoring tool for Windows that combines terminal UI (ratatui) and desktop GUI (egui) interfaces. Designed for real-time network diagnostics, it supports ICMP (no admin required), UDP, and TCP-SYN probing over IPv4 and IPv6, enabling users to analyze network paths with precision.

Key Features:

  • Multipath Discovery: Detects per-flow ECMP routes and visualizes them in the topology view.
  • Path-Change Alerting: Monitors for route changes, hop appearances/disappearances, latency spikes, or loss onset.
  • Enrichment Tools: Includes reverse-DNS, ASN (Cymru WHOIS), and geolocation enrichment for detailed insights.
  • Interactive Views: Offers a world map with path arcs, city labels, and zoom/pan capabilities; a topology view showing TTL columns and flow reconvergence; and a table view displaying loss, RTT, jitter, and hostname/IP information.
  • MTR-Compatible CLI: Provides live views or reports in MTR format, along with JSON and CSV outputs for integration and analysis.

    • Audience & Benefit: Ideal for network administrators, developers, and IT professionals who need to troubleshoot network performance issues. Hopscout enables users to identify latency sources, monitor route stability, and analyze network behavior without requiring admin privileges for ICMP-based tracing. Its multi-target dashboard and alerting system make it a powerful tool for proactive network monitoring.

    Hopscout can be installed via winget: winget install ABowlOfEleven.hopscout.

    README

    hopscout

    CI winget

    A modern traceroute + continuous-monitoring tool for Windows - native, no elevation required for the default path - with a ratatui CLI and an egui GUI sharing one engine. MTR parity, plus ASN/Geo enrichment, path-change alerting, multi-target dashboards, and multipath (Paris) discovery.

    > Status: Feature-complete. Three protocols (rung-1 ICMP unprivileged > IPv4+IPv6, rung-2 UDP via raw SIO_RCVALL, rung-3 TCP-SYN via > runtime-loaded Npcap), active multipath, path-change alerting, > multi-target dashboard, GeoIP map with coastlines and zoom/pan, topology > DAG, streaming percentiles, and path MTU discovery. An MTR-compatible CLI > (live view plus report/JSON/CSV) and a themeable egui GUI over one engine, > with rDNS/ASN/geo enrichment and capability-gated self-elevation. A > privilege-separation helper is in progress.

    Install

    • winget (recommended):

      winget install ABowlOfEleven.hopscout

      Per-user (no admin to install); adds hopscout to your PATH and a Start Menu entry for the GUI. Already installed? winget upgrade ABowlOfEleven.hopscout.

    • Installer (MSI): download hopscout--x64.msi from Releases and run it. Same per-user install if you would rather grab it directly.

    • Portable: hopscout--x64-portable.zip contains all three exes (hopscout.exe, hopscout-gui.exe, hopscout-helper.exe); unzip and run.

    • From source: Rust 1.85+ on Windows, then cargo build --release and cargo run -p hopscout-cli -- 8.8.8.8.

    UDP and TCP modes need administrator rights (and Npcap for TCP); hopscout detects this and offers to relaunch elevated.

    Workspace

    Versions
    0.1.1
    0.1.0
    Website
    github.com
    License
    Last updated
    6/27/2026
    Download latest version
    CrateRoleUnsafeState
    hopscout-coreProbe engine, Session model, rolling stats, the ProbeBackend trait.forbiddenworking
    hopscout-netThe single Win32 FFI boundary. Rung 1 (ICMP), rung 2 (raw UDP), rung 3 (Npcap TCP-SYN), capability detection, self-elevation.allowed (FFI)working
    hopscout-enrichBackground reverse-DNS, origin-ASN (Cymru WHOIS), and geolocation (ip-api).forbiddenworking
    hopscout-cliratatui live trace table.forbiddenworking
    hopscout-guiegui app - table/map/topology/alerts, themes, multi-target.forbiddenworking
    hopscout-helperElevated probe helper (privilege separation) over a named pipe.forbiddenbuilds; needs admin to run

    Capability ladder

    CapabilityBackendPrivilegeStatus
    ICMP trace + ping (IPv4 + IPv6)Icmp[6]SendEcho2none✅
    rDNS / ASN enrichmentuserspace (Cymru WHOIS)none✅
    UDP tracerouteraw SIO_RCVALL snifferadmin✅
    TCP-SYN traceroute (trace to :443)Npcap injectionNpcap + admin✅
    Active multipath (per-flow ECMP)UDP/TCP flow tuplesper protocol✅
    GeoIP map · topology DAG · path-change alerts · multi-targetuserspacenone✅

    Npcap (rung 3) is runtime-loaded via libloading, never bundled - its license restricts redistribution. hopscout builds and runs without the Npcap SDK; TCP mode lights up only when Npcap is installed (npcap.com).

    Architecture notes

    • One persistent thread per hop. Each worker owns its own ICMP handle and loops independently, so a timing-out router stalls only its own row. Path length converges on its own: once any hop sees the destination reply, a shared path_len shrinks to the smallest such TTL and deeper hops idle.
    • Enrichment is async and cached. A background thread fills hostnames and AS numbers as hops appear, with all DNS/WHOIS I/O performed off the session lock. ASNs are batched into one WHOIS query and written immediately; reverse DNS trickles in behind them.
    • Honest stats. Loss, plus O(1) Welford rolling mean and jitter (RTT stddev), and streaming p50/p95/p99 from a log-bucket histogram.

    CLI usage

    The command is hopscout and the option syntax mirrors mtr. Default is the live full-screen view; -r/--json/-C give non-interactive reports.

    cargo run -p hopscout-cli -- 8.8.8.8           # live view
cargo run -p hopscout-cli -- 8.8.8.8 -r -c 10  # MTR-style report, 10 cycles
cargo run -p hopscout-cli -- 8.8.8.8 --json    # JSON report
cargo run -p hopscout-cli -- 8.8.8.8 -T -P 443 # TCP-SYN trace to :443
cargo run -p hopscout-cli -- 8.8.8.8 --mtu     # path MTU probe
    FlagMeaningDefault
    -r, --reportnon-interactive report after N cycles
    -c, --report-cycles cycles to run for a report10
    -w, --report-widedo not truncate host names
    -j, --json / -C, --csvJSON / CSV report
    -n, --no-dnsdo not resolve host names
    -b, --show-ipsshow IPs alongside names
    -u, --udp / -T, --tcpUDP / TCP-SYN modeicmp
    -P, --port destination port (tcp)443
    -s, --psize payload bytes32
    -i, --interval seconds between probes1
    -m, --max-ttl maximum hops30
    -f, --first-ttl first hop1
    -4 / -6force IPv4 / IPv6auto
    --flows concurrent flows (multipath)1
    --mtuprobe path MTU and exit
    -e, --aslookupAS lookup (always on)
    -z, --mplsshow MPLS labels (udp/tcp modes)
    -o, --order stat columns: L S R D N A B W V PLSNABWVP
    -v, --versionprint version

    -u needs admin (raw SIO_RCVALL sniffer to capture ICMP errors); -T needs Npcap plus admin (packet injection). hopscout detects the gap and relaunches itself elevated. MPLS labels (-z) are decoded from ICMP extensions in the udp/tcp paths (the unprivileged ICMP API can't expose them). XML (-x) and source --address are accepted for compatibility but not yet implemented.

    Keys (interactive): q/Esc quit, p/space pause, r reset, b baseline.

    GUI usage

    cargo run -p hopscout-gui            # enter a target in the window
cargo run -p hopscout-gui -- 8.8.8.8 # auto-start a target

    Pick a protocol (ICMP/UDP/TCP) and port, enter a host, press Start. Three views:

    • Table - live loss/RTT/jitter with rDNS + ASN; click a hop for its sparkline.
    • Map - hops plotted by geolocation on an equirectangular grid, path arcs + city labels.
    • Topology - TTL columns of hop addresses with ASN coloring; with flows > 1 each flow draws its own polyline, so ECMP fan-out and reconvergence are visible.
    • Alerts - capture a baseline, then watch live deviations (route change, hop appear/disappear, latency regression, loss onset).

    Add several targets to monitor them side by side (left panel). Set flows for multipath. Pause/Resume/Reset and UDP/TCP elevation prompts from the top bar.

    Themes

    Six built-in themes (Midnight, Aurora, Nord, Solarized, Paper, Mono) selectable from the top bar. Drop your own *.toml palette into %APPDATA%\hopscout\config\themes\ (a custom-example.toml is written there on first run) and hit ⟳ to load it. Each theme recolors the whole UI including the map, topology, and table.

    Privilege separation (in progress)

    hopscout-helper.exe is the elevated half: it owns the raw socket / Npcap and serves the unprivileged app over a named pipe, so the main process never runs as admin. The message framing and server are in place; the cross-elevation pipe ACL and app wiring (vs. the current whole-app self-elevation) are the finishing steps.

    Headless smoke trace

    cargo run -p hopscout-net --example trace -- 8.8.8.8 10

    Starts the engine for ~10s and prints a snapshot (host, ASN, loss, RTT) - handy on machines without a TTY.

    License

    MIT - see LICENSE. Contributions are clean-room (no GPL mtr / WinMTR code); see CONTRIBUTING.md.

    Install hopscout using Winget - wingetCollections