Skip to content
PCAP Parser

Posts tagged: #pcap

← Back to all posts
DNS Analysis in a PCAP: A Defender's Guide
How to read DNS in a packet capture: queries and responses, result codes, rare and random-looking domains, and high-level signs of DNS tunnelling, with limits.
dnsnetwork-forensicsthreat-huntingpcap
JA3 Fingerprint vs JA4: TLS Client Fingerprinting Guide
What a JA3 fingerprint is, how JA4 differs, why Chrome's extension-order randomization broke JA3 stability, and how defenders use TLS fingerprints in triage.
tlsnetwork-forensicsthreat-huntingpcap
Wireshark Alternatives for PCAP Analysis, Compared
A fair comparison of Wireshark, tshark, NetworkMiner, Zeek, Zui and PCAP Parser for pcap analysis: strengths, limits, and which tool fits which job.
pcapwiresharknetwork-forensicsdfir
Is It Safe to Upload a PCAP Online? Analyze It Locally
Why packet captures are sensitive under GDPR and client contracts, how in-browser WebAssembly analysis avoids uploads, and how to verify nothing leaves.
pcapprivacydfirnetwork-forensics
How to Use PCAP Parser: A Tour of Every View
Step-by-step guide to PCAP Parser: load a capture, then read conversations, protocol hierarchy, DNS, HTTP, TLS, extracted files and IOCs, and export results.
pcapnetwork-forensicsdfirtls
Open a PCAP File Online Without Installing Wireshark
How to open a pcap or pcapng file online without installing anything: upload vs in-browser viewers, formats that fail, and what a browser tool can't do.
pcappcapngnetwork-forensicsprivacy
PCAP vs PCAPNG: File Format Differences Explained
PCAP vs PCAPNG compared block by block: headers, interfaces, timestamp resolution, metadata, which tools write which format and how to convert safely.
pcappcapngnetwork-forensicswireshark