Users can see a high-level overview displaying a PCAP timestamp, capture duration (in seconds), file size (in kB), and related packet statistics. PCAPviz organizes the output of the Packet Café analysis platform into an intuitive card- and icon-based interface, along with accompanying visualizations. We built PCAPviz to reduce the friction involved. This process frequently requires context-switching across different tools and different levels of analysis.

Since the “packet is the fundamental unit of information transport in all modern computer networks,” PCAP analysis is a critical capability for system administrators, security teams, and digital forensics investigators who typically work with large collections of captured packets.

What ports are sending traffic to/receiving traffic from a given device?.

What percentage of my traffic is English language plaintext (indicative of unencrypted traffic)?.

What devices are on my network (at a given point in time)? How confident am I this is the case?.

We designed PCAPviz to help network administrators answer three key questions: Both can be run locally at and once you drag and drop a PCAP file into the application, PCAPviz gets to work bringing together the output of multiple Packet Café analytics in an easy-to-review visual dossier. PCAPviz and Packet Café are available as an integrated software package on GitHub.

IQT Labs is pleased to release PCAPviz, a visualization interface for Packet Café, an automated packet capture (PCAP) analysis platform. How PCAPviz and Packet Café work together It helps system administrators identify devices on a network, review traffic encryption, and see port listening ranges. Built as an integrated frontend for Packet Café, PCAPviz can be deployed in multiple environments, including your local machine. PCAPviz is a user interface for packet capture (PCAP) analytics.

Pcap file analysis