Kestrel LITE vs PCAP Analyzer

Kestrel Lite is a network packet analyzer for iPhone and iPad — open a PCAP or PCAPNG file, see what's inside, and triage it from your phone or tablet. CORE FEATURES Dashboard with tappable widgets — jump from any metric to the relevant tab Packets list with hex+ASCII inspector and filter syntax (port, host, protocol, length) TCP stream reassembly with full payload view (captures under 1 GB) Flow records with bidirectional byte/packet counts Host inventory with hostname resolution from DNS observed in the capture DNS queries with full A/AAAA/CNAME/MX/TXT response data Protocol classification: TCP, UDP, ICMP, HTTP, HTTPS, DNS, SSH, FTP, SMTP, TLS, ARP, SMB, mDNS, DHCP, NTP, SNMP, SSDP, QUIC Timeline view of capture activity Chain-of-custody log with SHA-256 file integrity hash PRIVACY GUARANTEE 100% offline — no network access 100% on-device — your captures never leave your device No account required, no sign-in Free with no ads IDEAL FOR Network engineers triaging captures on the go Security analysts doing first-pass review Students learning packet analysis and networking Anyone curious about what's actually in their PCAP files LIMITATIONS PCAP files are processed up to 50,000 packets per capture Raw payload search is not included TCP reassembly disables automatically above 1 GB to protect device memory Upgrade to Kestrel Sight to get: Unlimited packet capacity — no 50,000-packet cap Analyst Bookmarks — flag any packet, flow, host, DNS query, or stream with a note. Bookmarks are included in the PDF export Enhanced IPv6 support — addresses displayed in canonical RFC 5952 form, search matches any textual representation of the same address Refined PDF reports — human-readable durations, complete Top Talkers, paginated bookmarks Refined CSV exports SUPPORT Questions, issues, or feature requests? Email support@tracivex.com — we read every message and use your feedback to guide development.

PCAP Analyzer brings powerful packet capture analysis to your iPhone. Open and analyze .pcap and .pcapng files directly on your device - no desktop computer, cloud upload, or external server required. Whether you’re a network engineer, developer, security professional, student, or simply troubleshooting a network issue, PCAP Analyzer gives you the essential tools to understand what’s happening inside a packet capture wherever you are. PACKET ANALYSIS Browse packets with clear protocol, source, destination, ports, timestamps, size, and packet details. Quickly filter traffic by protocols such as TCP, UDP, DNS, HTTP, TLS, ICMP, and many more. Use display filters to narrow down large captures and focus on the traffic that matters. PROTOCOL DISSECTION Inspect packets layer by layer - from Ethernet and IP to transport and application protocols. PCAP Analyzer supports dozens of protocols across multiple protocol groups, making it useful for analyzing everything from common Internet traffic to specialized network communications. FLOW ANALYSIS Turn thousands of individual packets into meaningful conversations. Explore TCP and UDP flows, see communicating endpoints, packet counts, transferred bytes, and traffic direction at a glance. CAPTURE STATISTICS Understand the overall behavior of your capture through visual statistics, including: • Total packets and bytes • Capture duration • Packets per second • Packets over time • Protocol hierarchy • Top talkers • Traffic direction RAW HEX VIEW Need to go deeper? Inspect the raw bytes of every packet with the built-in hexadecimal viewer. Switch between decoded packet details and raw packet data whenever you need byte-level analysis. BUILT FOR MOBILE PCAP Analyzer is designed specifically for phones - not simply a desktop interface squeezed onto a smaller screen. Open capture files from your device and investigate network traffic wherever you happen to be. Perfect for quick troubleshooting when you’re away from your workstation. PRIVATE BY DESIGN Your packet captures may contain sensitive network information. That’s why PCAP Analyzer processes capture files directly on your device. Your capture data does not need to be uploaded to a cloud analysis service just to inspect it. USE PCAP ANALYZER FOR • Network troubleshooting • Packet inspection • Protocol debugging • Application development • API troubleshooting • IoT debugging • Telecom protocol analysis • Network security investigation • Learning networking and protocols • Inspecting captures while away from your computer YOUR PACKET ANALYZER, IN YOUR POCKET Wireshark is invaluable when you’re sitting at a workstation. But sometimes the capture you need to inspect arrives when you’re nowhere near one. PCAP Analyzer gives you a fast, convenient way to open a capture, inspect packets, understand conversations, and identify what’s happening - directly from your iPhone. Open the capture. Follow the packets. Find the answer.