Parse Wireshark-style packet text exports in the browser. Supports TSV (Wireshark default), CSV, and tcpdump line format. Auto-detects port scans, beacon timing, DNS anomalies. No upload, no backend.
Input
Load: port scan sampleLoad: C2 beaconing sampleLoad: DNS tunneling sampleLoad: benign traffic
Filters
Paste packet text and click Parse and Analyze.
Heuristic analyzer — patterns flagged are signals, not verdicts. Real traffic analysis needs full pcap (binary) inspection in Wireshark/tshark/Zeek. This tool serves quick triage and learning.
Sample data uses RFC 5737 / RFC 1918 synthetic IPs. *.example.com hosts. No real traffic.