A RedEye Networks product

One EXE. Eight modes. Zero install.

The network troubleshooting platform that replaces your entire toolbox. Visual multi-path traceroute, bandwidth testing, SNMP discovery, multicast analysis, Layer 2 inspection, MAC lookup, Nmap and fleet monitoring — in a single portable executable with no runtime and no dependencies.

Download for Windows See all downloads

Free — no account, no trial, no credit card.

winget install RedEyeNetworks.HopMatrix
v1.11.0 Windows x64 & ARM64 Linux x64 macOS soon ~50 MB single file No install Authenticode-signed + VirusTotal
$0. Just start using it.

Download the binary directly, or install with winget install RedEyeNetworks.HopMatrix. No sign-up, no license key, no trial timer.

Because your current toolkit is a mess

Every tool shows one slice. None of them talk.

You switch between WinMTR for traceroutes, iperf3 for bandwidth, a browser for MAC lookups, PuTTY for SNMP walks, and Wireshark for multicast — then track it all in a spreadsheet. HopMatrix replaces all of it.

The problemThe old wayHopMatrix
Where is the latency?WinMTR — single path, no historyMulti-path topology, delta latency on every edge, time-scrubber replay, IPv4 + IPv6
Is the link saturated?Separate iperf3 binary + CLIIntegrated iperf3 client and server, sparklines, bidirectional testing
What is on this switch port?Console cable + show cdp neighborsL2 Inspector: live CDP / LLDP / STP BPDU / ARP via Npcap
Which devices respond to SNMP?Manual snmpwalk + spreadsheetSNMP subnet discovery + walk, 117 MIB mappings, 25+ presets, v1/v2c/v3
Is multicast working?Wireshark + manual decodeJoin groups, capture all multicast, 17 protocol decoders, PCAP export
What vendor is this MAC?Web lookup, one at a time57,000-entry IEEE database, bulk-parse an entire ARP table
What ports are open?Separate Nmap install + CLIIntegrated Nmap, multiple scan profiles, right-click any hop
Monitor 200 endpoints?Expensive commercial NMS256-endpoint dashboard (up to 1024), alerts, sparklines, health scores

Eight modes, one window

Everything you reach for, in a single portable EXE

Each mode is a full tool in its own right — and they share one interface, one session history, and one export path.

Visual multi-path traceroute

A true visual network trace — watch every path, not just the one that answered first, and see exactly which hop adds the latency.

  • Multi-stack (IPv4 + IPv6), multi-protocol (ICMP / UDP / TCP) traceroute with ECMP awareness
  • Delta latency on every edge; per-hop sparklines with loss ticks
  • Time-scrubber replay; routing-loop, ECMP-mixed and rate-limit detection in plain English

Native bandwidth testing (iperf3)

Real TCP/UDP throughput with no separate iperf3 binary — client and server in the same EXE.

  • Clean-room iperf3 wire protocol, verified against iperf3 3.20
  • 51 Gbps combined on loopback; up to 128 parallel streams; IPv6, DSCP marking
  • Dual-color upload/download sparklines with real Mbps labels

SNMP discovery + MIB walk

Find every SNMP-responsive device on a subnet, then walk it — v1, v2c and v3 with full auth/priv.

  • Concurrent CIDR discovery; auto-classifies vendor from sysObjectID
  • 117-entry embedded MIB dictionary; 25+ walk presets
  • Right-click a host to walk it, open in Trace, or add to Monitor

Multicast troubleshooting

Join any multicast group and see what is actually on the wire, decoded — real multicast troubleshooting without a manual capture.

  • 17 protocol decoders: IGMP, mDNS, SSDP, PIM, HSRP, VRRP, OSPF and more
  • Full-frame hex dump; PCAP export straight into Wireshark
  • Browsable mDNS service cache

Layer 2 inspector

See what the switch actually says about itself — without a console cable.

  • Live CDP, LLDP, STP/RSTP BPDU and ARP capture via Npcap
  • Native VLAN detection; full RSTP BPDU decode; 802.1Q tags
  • PID / VID / serial from CDP; L2 PCAP export

Bulk-parse switch ARP and MAC tables

Resolve MAC vendors instantly — even air-gapped. Paste a raw table, get every vendor back.

  • 57,000+ IEEE OUI entries embedded — zero network dependency
  • Bulk-parse raw show ip arp / show mac address-table output
  • Filter + CSV export; flags multicast, broadcast and locally-administered

Integrated Nmap

Bring Nmap into the trace without leaving the tool.

  • Right-click any hop on the topology to scan it
  • Multiple scan profiles; full untouched Nmap output preserved
  • Uses your installed Nmap (not bundled — see FAQ)

Fleet monitoring with multi-ping

Keep an eye on the whole fleet in one grid — multi-ping across hundreds of endpoints with alerts, sparklines and health scores.

  • 256 endpoints by default, configurable up to 1024 (ICMP, TCP or NTP)
  • Discover targets by sweeping a subnet as wide as a /22
  • Alert thresholds on RTT, loss, jitter; double-click a row into a full Trace

And the quick tools you keep reaching for

Traffic Generator (to 10 Gbps)Path MTU DiscoveryBurst Probe Cisco Remote Capture (ciscodump over SSH)Subnet Calculator (IPv4 + IPv6) WhoisRoute TableHosts File ViewerListening PortsLocal ARP Table

Built to be trusted on production networks

Real engineering, not a weekend script

Truly cross-platformWindows 10/11 x64 + ARM64 and Linux x64 today, macOS on Apple Silicon next — one codebase, one Avalonia UI.
Single-file, zero installA self-contained ~50 MB binary. No runtime to deploy, portable off a USB stick, no admin for basic use.
2,660+ automated testsAn xUnit suite with a CI-enforced coverage floor, plus a runtime self-test that exercises the full app end-to-end.
Signed and scannedWindows builds are Authenticode-signed via Azure Trusted Signing; every stable release is auto-submitted to VirusTotal.
Ships through wingetInstall with a single command, and upgrade with winget upgrade.
Fresh data every releaseEmbedded IEEE OUI, Team Cymru ASN and db-ip GeoIP databases refresh at every tag — so lookups work offline and stay current.

Download HopMatrix

Free. No account. Just download and run.

Download for Windows (x64) v1.11.0 · per-user installer · ~89 MB · Authenticode-signed

Windows 10/11 (x64)

64-bit Intel / AMD
Installer Portable EXE

Recommended · no admin required. Machine-wide installer

Windows on ARM

ARM64 — Surface, Snapdragon
Installer Portable EXE

No admin required. Machine-wide installer

Linux (x64)

Self-contained binary
Download binary

chmod +x HopMatrix-linux-x64 && ./HopMatrix-linux-x64

Coming soon

macOS (Apple Silicon)

M-series

A notarized macOS build is in progress. Windows and Linux are available now.

winget install RedEyeNetworks.HopMatrix
All releases & changelog on GitHub ↗

Every stable build is Authenticode-signed and automatically scanned on VirusTotal, with SHA-256-keyed links in the release notes.

Questions, answered

FAQ

How much does HopMatrix cost?
HopMatrix is free of charge for personal and internal business use — no account, no trial, no credit card. The license is proprietary and source-available: the source is public on GitHub, but modification and derivative works are not permitted, so it is not open source. See the full LICENSE.md.
Does HopMatrix bundle Nmap or Npcap?
No. Both are external and installed separately if you want the features that depend on them — Nmap for integrated scanning and Npcap for the L2 Inspector capture. Everything else works without them.
Do I need admin or root?
Not for most things. ICMP traceroute, iPerf, SNMP, MAC lookup, the subnet calculator and the read-only quick tools need no elevation. Elevation is required for UDP/ECMP (Paris) and TCP SYN probing, custom DSCP marking, and packet recording. Privilege-gated features are marked, with a one-click restart-elevated option.
Which platforms are supported?
Windows 10/11 (x64 and ARM64) and Linux x64 are available now. macOS on Apple Silicon is in progress, with Developer ID signing and notarization landing in an upcoming release. Windows builds are Authenticode-signed via Azure Trusted Signing.
Portable vs installer vs machine-wide installer — which do I want?
Portable EXE — download, drop on a USB stick, run. No install, no registry writes. Per-user installer — winget-friendly, no admin, adds hopmatrix to your user PATH. Machine-wide installer — one install for every user on the box. All are signed and byte-identical to the copies scanned on VirusTotal.
How do updates work?
HopMatrix checks for updates in-session and shows a banner when a new stable release is out. The Download button always fetches the current release through the evergreen download.redeyenetworks.com mirror. On Windows, winget upgrade works too. Update checks can be disabled, and the whole app runs offline.
Can I run HopMatrix air-gapped or offline?
Yes. Launch with --airgap (or toggle it in Settings) to suppress all external enrichment endpoints. Offline lookups keep working because the OUI, ASN and GeoIP databases are embedded in the binary and refreshed at release time. System DNS to internal resolvers is preserved.
Can I automate HopMatrix from the command line?
Yes. hopmatrix 8.8.8.8 opens the GUI and starts tracing; hopmatrix 1.1.1.1 8.8.8.8 opens one tab per target. Every mode has a launcher (--iperf, --snmp, --multicast, --l2, --oui, --subnet, -m) with probe modifiers and bulk import options. A bad value exits with the list of valid ones.