Purpose-Built
An offline PCAP and PCAPNG workbench for inventorying captures, decoding common link and network headers, following conversations, filtering traffic, and exporting evidence reports.
One-time iPhone and iPad app
Tracebastion
Packet captures, decoded
Core Features
- Open classic PCAP and PCAPNG captures from Files
- Decode Ethernet, IPv4, IPv6, TCP, UDP, ICMP, and DNS headers
- Filter by protocol, address, port, length, and timestamp
- Summarize endpoints, conversations, retransmission hints, and bursts
- Export a redacted capture inventory and conversation report
Private by Design
No account, subscription, ads, tracking, third-party analytics, or developer-operated backend. Core features work offline, and your work stays on device unless you deliberately share or export it.
Use It Responsibly
Use Tracebastion only on captures you are authorized to inspect. Protocol summaries are diagnostic evidence, not proof of identity, intent, compromise, or legal attribution.