PCAP Triage Lite
Extract HTTP, DNS and TLS indicators from PCAP files in your browser.
Drop a PCAP file to quickly extract HTTP, DNS and TLS metadata for rapid network triage. Use the CSV export to save results for offline analysis. For deep packet analysis use dedicated local tools.
How it works
The PCAP triage parses classic pcap files client-side, extracts protocol-level indicators such as HTTP requests, DNS queries and TLS SNI values. Parsing is performed inside a Web Worker and will optionally use an available WASM parser for improved performance and format/pcapng support.
This tool is intended for quick triage — export findings and corroborate with full packet analysis when needed.
Input
Drop a file here or click to browse
Accepted: .pcap,.pcapng,.dump
No file selected
Drop a pcap file to start analysis.
Frequently Asked Questions
Which PCAP formats are supported?
Classic pcap files are supported; pcapng is heuristically handled and support improves when a WASM parser is available.
Is parsing local?
Yes. All parsing runs in your browser and in a Web Worker; files are not uploaded.
Can I export results?
Yes — the UI includes CSV export for findings (per-section and aggregate "Export All").