PacketScope

Offline network forensics
100% client-side · Zero server calls

Analyze network traffic
without leaving your browser

Wireshark-style packet inspection that runs entirely offline. Parse .pcap captures, decode protocols, and visualize traffic patterns — no data ever leaves your machine.

No upload required
packetscope — zsh — 80x24
reading from file capture.pcap, link-type EN10MB (Ethernet)
12:34:56.789123 IP 192.168.1.42.443 > 10.0.0.5.54321: Flags [S.], seq 12345, ack 67890
12:34:56.789456 IP 10.0.0.5.54321 > 192.168.1.42.443: Flags [.], ack 1
12:34:56.789789 IP 192.168.1.42.443 > 10.0.0.5.54321: Flags [P.], seq 1:517, ack 1
12:34:56.790012 IP 10.0.0.5.54321 > 192.168.1.42.443: Flags [.], ack 517
12:34:56.790345 IP 192.168.1.42.53 > 8.8.8.8.53: 12345+ A? example.com.
12:34:56.791678 IP 8.8.8.8.53 > 192.168.1.42.53: 12345 1/0/0 A 93.184.216.34
---
8 packets captured, 0 packets dropped

Supported Protocols

+ ICMP, ARP
Ethernet
MAC addresses, ethertype
IPv4 / IPv6
Source / destination IPs
TCP
Ports, flags, sequence
UDP
Ports, length, checksum
DNS
Queries, responses, records
HTTP
Methods, hosts, paths

Deep Packet Inspection

Decode Ethernet, IPv4/IPv6, TCP, UDP, ICMP, ARP, DNS, and HTTP layers with full field breakdown.

Smart Filtering

Filter by protocol, IP address, or keyword. Sort by any column. Instantly narrow thousands of packets.

Keyword Search

Search across all packet fields — MACs, IPs, ports, payloads, and protocol info in one query.

Real-time Analytics

Protocol distribution, top talkers, packet size histograms, and traffic timelines — all computed on-device.

Privacy First

Your capture files never leave the browser. Zero external APIs, zero telemetry, zero backend.

Export & Share

Export filtered results as structured JSON. Share findings without sharing the raw capture.

Drop a .pcap file here
Classic libpcap format · Ethernet/IPv4/IPv6 · 100% in-browser
How it works

PacketScope parses libpcap captures directly in your browser using a custom zero-dependency decoder. Files never leave your machine — there's no server, no upload, no telemetry. Drop a .pcap file above to inspect Ethernet, IPv4/IPv6, TCP, UDP, ICMP and ARP frames.