PCAP Analyzer · File Reader vs PCAP Analyzer

PCAP Analyzer opens and analyzes .pcap and .pcapng network captures right on your iPhone, iPad, and Mac, with no desktop required. Troubleshoot a flaky connection, investigate a security incident, or learn how networks really work, with a fast, deep, and clear packet analyzer in your pocket. Open captures created by tcpdump, tshark, and any standard pcap or pcapng tool, and read the wire like a page. DEEP PROTOCOL DECODING Every frame is dissected down to the field: Ethernet and VLAN, IPv4, IPv6, TCP, UDP, ICMP, ICMPv6, IGMP, ARP, DNS, mDNS, LLMNR, DHCP, HTTP, HTTP/2, TLS, DTLS, QUIC, SMB2, SNMP, NTP, RADIUS, TFTP, MQTT, SCTP, GRE, ESP, and NetFlow/IPFIX. A clean, tappable detail tree and a full hex view show every byte. TLS FINGERPRINTING, JA3 AND JA4 PCAP Analyzer computes JA3 and JA4 client fingerprints natively, and even decrypts QUIC Initial packets to recover the SNI and fingerprints, analysis that usually needs desktop plugins. FIND THE PROBLEM FAST • Color coded packets, so retransmissions, resets, errors, and stalls stand out • Expert diagnostics: TCP retransmissions, duplicate ACKs, zero window stalls, connection resets, HTTP errors, and DNS failures • Threat detection: port and host scans, suspicious C2 and backdoor ports, possible DNS tunneling, and cleartext credentials POWERFUL DISPLAY FILTER A real, field aware filter language with autocomplete and saved filters: tcp.port == 443, tls.sni contains "example", tcp.analysis.zero_window, dns or http. Tap any field in a packet to filter by it instantly. STATISTICS AND VISUALS Conversations, Endpoints, Protocol Hierarchy, a network topology map, an I/O graph, Follow Stream with a TCP sequence and time graph, and automatic name resolution, so you see hostnames instead of raw IP addresses. ON-DEVICE AI On supported iPhones with Apple Intelligence, an on device model summarizes a capture in plain language and turns plain English requests into filters, like "show failed connections". It runs entirely on your device, and your capture never leaves your phone. BUILT FOR BIG CAPTURES A native streaming engine opens very large captures without running out of memory, files that crash other mobile viewers. PRIVATE BY DESIGN Everything happens on your device. PCAP Analyzer reads saved files only, captures no live traffic, needs no special permissions, and never uploads your data. Privacy Policy: https://rush.tools/privacy Terms of Use: https://rush.tools/terms

PCAP Analyzer brings powerful packet capture analysis to your iPhone. Open and analyze .pcap and .pcapng files directly on your device - no desktop computer, cloud upload, or external server required. Whether you’re a network engineer, developer, security professional, student, or simply troubleshooting a network issue, PCAP Analyzer gives you the essential tools to understand what’s happening inside a packet capture wherever you are. PACKET ANALYSIS Browse packets with clear protocol, source, destination, ports, timestamps, size, and packet details. Quickly filter traffic by protocols such as TCP, UDP, DNS, HTTP, TLS, ICMP, and many more. Use display filters to narrow down large captures and focus on the traffic that matters. PROTOCOL DISSECTION Inspect packets layer by layer - from Ethernet and IP to transport and application protocols. PCAP Analyzer supports dozens of protocols across multiple protocol groups, making it useful for analyzing everything from common Internet traffic to specialized network communications. FLOW ANALYSIS Turn thousands of individual packets into meaningful conversations. Explore TCP and UDP flows, see communicating endpoints, packet counts, transferred bytes, and traffic direction at a glance. CAPTURE STATISTICS Understand the overall behavior of your capture through visual statistics, including: • Total packets and bytes • Capture duration • Packets per second • Packets over time • Protocol hierarchy • Top talkers • Traffic direction RAW HEX VIEW Need to go deeper? Inspect the raw bytes of every packet with the built-in hexadecimal viewer. Switch between decoded packet details and raw packet data whenever you need byte-level analysis. BUILT FOR MOBILE PCAP Analyzer is designed specifically for phones - not simply a desktop interface squeezed onto a smaller screen. Open capture files from your device and investigate network traffic wherever you happen to be. Perfect for quick troubleshooting when you’re away from your workstation. PRIVATE BY DESIGN Your packet captures may contain sensitive network information. That’s why PCAP Analyzer processes capture files directly on your device. Your capture data does not need to be uploaded to a cloud analysis service just to inspect it. USE PCAP ANALYZER FOR • Network troubleshooting • Packet inspection • Protocol debugging • Application development • API troubleshooting • IoT debugging • Telecom protocol analysis • Network security investigation • Learning networking and protocols • Inspecting captures while away from your computer YOUR PACKET ANALYZER, IN YOUR POCKET Wireshark is invaluable when you’re sitting at a workstation. But sometimes the capture you need to inspect arrives when you’re nowhere near one. PCAP Analyzer gives you a fast, convenient way to open a capture, inspect packets, understand conversations, and identify what’s happening - directly from your iPhone. Open the capture. Follow the packets. Find the answer.