Kestrel LITE vs CoCrypt

Kestrel Lite is a network packet analyzer for iPhone and iPad — open a PCAP or PCAPNG file, see what's inside, and triage it from your phone or tablet. CORE FEATURES Dashboard with tappable widgets — jump from any metric to the relevant tab Packets list with hex+ASCII inspector and filter syntax (port, host, protocol, length) TCP stream reassembly with full payload view (captures under 1 GB) Flow records with bidirectional byte/packet counts Host inventory with hostname resolution from DNS observed in the capture DNS queries with full A/AAAA/CNAME/MX/TXT response data Protocol classification: TCP, UDP, ICMP, HTTP, HTTPS, DNS, SSH, FTP, SMTP, TLS, ARP, SMB, mDNS, DHCP, NTP, SNMP, SSDP, QUIC Timeline view of capture activity Chain-of-custody log with SHA-256 file integrity hash PRIVACY GUARANTEE 100% offline — no network access 100% on-device — your captures never leave your device No account required, no sign-in Free with no ads IDEAL FOR Network engineers triaging captures on the go Security analysts doing first-pass review Students learning packet analysis and networking Anyone curious about what's actually in their PCAP files LIMITATIONS PCAP files are processed up to 50,000 packets per capture Raw payload search is not included TCP reassembly disables automatically above 1 GB to protect device memory Upgrade to Kestrel Sight to get: Unlimited packet capacity — no 50,000-packet cap Analyst Bookmarks — flag any packet, flow, host, DNS query, or stream with a note. Bookmarks are included in the PDF export Enhanced IPv6 support — addresses displayed in canonical RFC 5952 form, search matches any textual representation of the same address Refined PDF reports — human-readable durations, complete Top Talkers, paginated bookmarks Refined CSV exports SUPPORT Questions, issues, or feature requests? Email support@tracivex.com — we read every message and use your feedback to guide development.

CoCrypt protects your files with collective encryption — a file can only be unlocked when every trusted participant is physically present and confirms in person. No exceptions. How It Works 1. Key Registration: Each participant generates a unique cryptographic key pair on their own device. Public keys are exchanged wirelessly through physical proximity — nothing leaves the room. 2. Locking: The owner encrypts any file. The encryption key is mathematically split into fragments, one per participant, and sealed into a single .cvl file. 3. Collective Unlocking: Every participant must physically bring their device close to unlock. A single missing presence makes decryption mathematically impossible — forever. Key Features - N-of-N Collective Approval: Ownership is truly shared. Not one person, not a majority — everyone must be present. - Presence-Based Key Exchange: Keys are exchanged through physical proximity only. No internet, no cloud, no remote access. - Challenge-Response Protocol: Every session uses a unique time-stamped ECDSA challenge, making replay attacks impossible. - Zero-Cloud & Zero-Account: No servers. No accounts. No telemetry. Private keys never leave the device's secure hardware. - Universal File Support: Documents, photos, videos, archives — any file format can be locked. Ideal For - Enterprises: Require all board members to be physically present before accessing critical files. - Families: Protect inheritance documents, accessible only when the whole family is together. - Teams: Store shared secrets where no single individual holds complete authority. - Journalists: Tie source access to the physical authorization of multiple colleagues.