Getting Started
An offline PCAP and PCAPNG workbench for inventorying captures, decoding common link and network headers, following conversations, filtering traffic, and exporting evidence reports.
Support
Tracebastion Support
Help and product information for Tracebastion.
Included Features
- Open classic PCAP and PCAPNG captures from Files
- Decode Ethernet, IPv4, IPv6, TCP, UDP, ICMP, and DNS headers
- Filter by protocol, address, port, length, and timestamp
- Summarize endpoints, conversations, retransmission hints, and bursts
- Export a redacted capture inventory and conversation report
Common Questions
Does the app need an account, subscription, or in-app purchase?
No. It is a one-time paid download with no account, advertising, analytics, subscription, or in-app purchase.
Does it work offline?
Yes. Core features and bundled material work without a developer-operated service.
Where is my information stored?
Your editable workspaces, parameter values, imported records, comparison settings, notes, and export history remain in local app storage.
What are the limits?
Use Tracebastion only on captures you are authorized to inspect. Protocol summaries are diagnostic evidence, not proof of identity, intent, compromise, or legal attribution.
Contact
Email support@shadowfetch.com with the app name, device model, iOS version, and a concise description of the issue.