How does this PCAP viewer parse network packets?

The tool reads standard libpcap binary headers (magic number 0xa1b2c3d4) and pcapng blocks directly using JavaScript ArrayBuffer and DataView, decoding Ethernet, IP, and TCP/UDP headers client-side.

Is my network capture file uploaded to any remote server?

No. The entire packet dissection and hex visualization occurs locally within your browser sandbox. No sensitive network traffic or packet data ever leaves your computer.

PCAP / PCAPNG Packet Analyzer & Hex Inspector

Inspect Wireshark packet captures without installing native tools. Dissect Ethernet, IPv4, TCP, UDP, and DNS packets with real-time hex payload analysis 100% offline.

Total Packets 0

TCP Packets 0

UDP / DNS 0

Capture Size 0 KB

PACKET LIST 0 packets

#	Time	Source	Destination	Proto	Len	Info / Flags
Upload a .pcap file or load a sample.

PACKET PAYLOAD (HEX & ASCII) Select a packet

Click on a packet on the left to inspect its raw payload.

Frequently Asked Questions

What formats are supported?

Both standard Libpcap (.pcap, big-endian and little-endian) and Next Generation Capture (.pcapng) files are supported.

How are TCP flags decoded?

The parser reads byte 13 of the TCP header to extract standard control bits: SYN (synchronize sequence numbers), ACK (acknowledgment), FIN (connection teardown), RST (reset connection), and PSH (push data immediately).