PCAP Analyzer

PCAPNG File Reader, Viewer

Free · In‑App Purchases · Designed for iPad. Not verified for macOS.

Open .pcap and .pcapng captures on iPhone, iPad, and Mac. Deep protocol decoding, JA3/JA4, a display filter, threat detection, and on-device AI. Nothing is uploaded. PCAP Analyzer opens and analyzes .pcap and .pcapng network captures right on your iPhone, iPad, and Mac, with no desktop required. Troubleshoot a flaky connection, investigate a security incident, or learn how networks really work, with a fast, deep, and clear packet analyzer in your pocket. Open captures created by tcpdump, tshark, and any standard pcap or pcapng tool, and read the wire like a page. DEEP PROTOCOL DECODING Every frame is dissected down to the field: Ethernet and VLAN, IPv4, IPv6, TCP, UDP, ICMP, ICMPv6, IGMP, ARP, DNS, mDNS, LLMNR, DHCP, HTTP, HTTP/2, TLS, DTLS, QUIC, SMB2, SNMP, NTP, RADIUS, TFTP, MQTT, SCTP, GRE, ESP, and NetFlow/IPFIX. A clean, tappable detail tree and a full hex view show every byte. TLS FINGERPRINTING, JA3 AND JA4 PCAP Analyzer computes JA3 and JA4 client fingerprints natively, and even decrypts QUIC Initial packets to recover the SNI and fingerprints, analysis that usually needs desktop plugins. FIND THE PROBLEM FAST • Color coded packets, so retransmissions, resets, errors, and stalls stand out • Expert diagnostics: TCP retransmissions, duplicate ACKs, zero window stalls, connection resets, HTTP errors, and DNS failures • Threat detection: port and host scans, suspicious C2 and backdoor ports, possible DNS tunneling, and cleartext credentials POWERFUL DISPLAY FILTER A real, field aware filter language with autocomplete and saved filters: tcp.port == 443, tls.sni contains "example", tcp.analysis.zero_window, dns or http. Tap any field in a packet to filter by it instantly. STATISTICS AND VISUALS Conversations, Endpoints, Protocol Hierarchy, a network topology map, an I/O graph, Follow Stream with a TCP sequence and time graph, and automatic name resolution, so you see hostnames instead of raw IP addresses. ON-DEVICE AI On supported iPhones with Apple Intelligence, an on device model summarizes a capture in plain language and turns plain English requests into filters, like "show failed connections". It runs entirely on your device, and your capture never leaves your phone. BUILT FOR BIG CAPTURES A native streaming engine opens very large captures without running out of memory, files that crash other mobile viewers. PRIVATE BY DESIGN Everything happens on your device. PCAP Analyzer reads saved files only, captures no live traffic, needs no special permissions, and never uploads your data. Privacy Policy: https://rush.tools/privacy Terms of Use: https://rush.tools/terms

Ratings & Reviews

  • This app hasn’t received enough ratings or reviews to display an overview.

Big captures now open fast. We rebuilt file opening from the ground up: multi-gigabyte .pcap and .pcapng files load quickly and stream through our native engine without running out of memory. What's new: - Fixed files that wouldn't open. Captures from iCloud Drive and the Files app no longer fail with a "temporary copy" error — they open in place. - Open large pcap files fast. Multi-GB network captures load and scroll smoothly, even on iPhone. - On-device AI is live. Get an instant plain-language capture summary and turn natural language into a display filter — private, offline, no cloud. - Smoother deep packet inspection. Snappier packet list, protocol dissection tree, and hex view. - Faster, steadier protocol analysis: TCP, UDP, HTTP, TLS, DNS, QUIC and more. PCAP Analyzer & File Viewer is a packet analyzer and pcapng viewer for iPhone, iPad and Mac — network traffic analysis, conversations, expert info and threat detection, fully on-device and offline. Your captures never leave your device. Still won't open? Email us the details and we'll fix it fast.

Version 1.0.1

The developer, Rush Tools LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary, for example, based on the features you use or your age. Learn More

    Accessibility

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Information

    Seller
    • RUSH TOOLS LLC
    Size
    • 25.1 MB
    Category
    • Utilities
    Compatibility
    Requires iOS 15.0 or later.
    • iPhone
      Requires iOS 15.0 or later.
    • iPad
      Requires iPadOS 15.0 or later.
    • iPod touch
      Requires iOS 15.0 or later.
    • Mac
      Requires macOS 12.0 or later and a Mac with Apple M1 chip or later.
    • Apple Vision
      Requires visionOS 1.0 or later.
    Languages
    • English
    Age Rating
    4+
    In-App Purchases
    Yes
    Copyright
    • © 2026 RUSH TOOLS LLC.
  • Developer Website
  • Privacy Policy
  • License Agreement

    • More by Rush Tools LLC