PCAP Analyzer

PCAP Analyzer processes offline capture files to extract quantitative and qualitative network insights. Given a PCAP or PCAPNG upload, it reads packets, reconstructs flows, and computes statistics such as duration, total bytes, average and peak throughput, and per-protocol distributions. It identifies top talkers and conversations and highlights abnormal activity patterns that may indicate issues or security events.
The tool applies a flow-based model, grouping packets by 5-tuple (source/destination IP, source/destination port, protocol) and direction to build coherent conversations. It supports optional time-window filtering and BPF-like subsetting to limit the analysis to a subnet, protocol, or timeframe. Outputs are designed for automation and downstream processing in JSON or CSV formats.
Typical beneficiaries include network operations centers, security teams, and IT admins who need repeatable, auditable results from offline captures. The tool emphasizes deterministic statistics and clear provenance for investigations and reporting.