# Network Packet Analyzer Parse pcap and basic pcapng captures, surface protocol hierarchy and session statistics, and export filtered packet summaries > Canonical page: https://elysiatools.com/en/tools/network-packet-analyzer - **Category:** Network - **Keywords:** pcap, pcapng, tcp, udp, http, dns, packet analyzer ## Overview Upload a pcap or basic pcapng capture to inspect packet-level activity without leaving the browser workflow. The tool extracts packet summaries, protocol counts, top IPs, top ports, simple sessions, and a coarse packet timeline. What the tool can currently detect: - Ethernet frames carrying IPv4 - TCP and UDP transport packets - Simple HTTP request/response detection from TCP payload prefixes - Basic DNS detection on port 53 with question-name extraction - Session grouping by protocol + source/destination IP and port tuple How to fill the fields: - PCAP File: upload a .pcap file, or a basic .pcapng file with Ethernet packets - Protocol Filter: narrow the report to all packets, or only TCP, UDP, HTTP, or DNS summaries - IP Filter: optionally focus on traffic involving one IPv4 address - Export Format: choose JSON or CSV for the filtered packet summaries shown in the report How to read the report: - Packets is the number of packets after filtering - Protocols is the number of distinct detected protocol labels in the filtered view - Sessions counts grouped flows based on protocol and endpoint tuple - Top IPs and Top ports show the busiest addresses and ports - Timeline groups packets by second so bursts are easy to spot - Export preview shows the same filtered records in JSON or CSV form for copy/export workflows Current scope and limits: - Focuses on Ethernet + IPv4 captures - Does not fully decode TLS, IPv6, ARP, ICMP, reassembly, or deep application payloads - pcapng support is practical but intentionally basic - This is meant for fast triage and summary analysis rather than a Wireshark replacement ## Inputs - **PCAP File** (file) - **Protocol Filter** (select) - **IP Filter** (text): 192.168.1.10 - **Export Format** (select) ## When to use - When you need to quickly inspect a packet capture file without installing heavy desktop analysis software. - When isolating specific HTTP or DNS traffic from a noisy network capture to troubleshoot connectivity issues. - When extracting a list of top communicating IP addresses and ports to include in a security or network audit report. ## How it works - Upload a standard .pcap or basic .pcapng file containing Ethernet and IPv4 packets. - Select a protocol filter (TCP, UDP, HTTP, or DNS) and optionally enter a specific IPv4 address to narrow down the traffic. - Review the generated HTML report, which displays packet counts, top IPs, active ports, and a coarse timeline of network bursts. - Choose JSON or CSV as the export format to copy or download the filtered packet summaries for external use. ## Use cases - Triaging a suspicious network capture to identify the most active source and destination IP addresses. - Filtering a large capture file to extract only DNS queries and responses for domain resolution troubleshooting. - Converting raw packet capture summaries into a structured CSV or JSON format for ingestion into a custom dashboard. ## Frequently asked questions ### What file formats are supported? The tool accepts standard .pcap files and basic .pcapng files containing Ethernet packets. ### Can this tool decrypt TLS or HTTPS traffic? No, the analyzer focuses on surface-level packet headers and basic unencrypted payloads like HTTP and DNS. It does not perform TLS decryption or deep application payload inspection. ### Does it support IPv6 traffic? Currently, the tool is optimized for Ethernet frames carrying IPv4 traffic. IPv6, ARP, and ICMP packets are not fully decoded. ### How does the timeline feature work? The timeline groups packets by the second, allowing you to easily spot sudden bursts of network traffic or identify periods of inactivity. ### Can I export the filtered packet data? Yes, you can export the filtered packet summaries in either JSON or CSV format for use in other reporting or analysis tools. ## Related tools - [VP8 Image Analyzer](https://elysiatools.com/en/tools/vp8-image-analyzer): Analyze a WebP/VP8 image with Sharp, generate a grayscale displacement map, and render it as an interactive Three.js 3D relief surface - [Image Metadata Extractor](https://elysiatools.com/en/tools/image-metadata): Extract comprehensive metadata from images including EXIF, IPTC, XMP, and technical information - [Accessibility Checker](https://elysiatools.com/en/tools/accessibility-checker): Detect common WCAG 2.1 accessibility issues in HTML, fetched pages, or design images and return fix-ready guidance - [Color Vision Accessibility Checker](https://elysiatools.com/en/tools/color-vision-accessibility-checker): Measure WCAG contrast, simulate major color-vision deficiencies, and optionally flag low-contrast regions in a UI screenshot - [NSFW Image Content Detector](https://elysiatools.com/en/tools/nsfw-image-detector): AI-powered image content safety detector using NSFWJS to classify potentially inappropriate content with fallback analysis, supporting GIF/Animated WebP/APNG and JPEG/PNG/WEBP. - [AI Image Smart Enhance](https://elysiatools.com/en/tools/ai-image-enhance): Intelligently analyze and enhance image quality using AI vision models - [HDR AVIF to SDR PNG Tone Mapper](https://elysiatools.com/en/tools/hdr-avif-to-sdr-png): Decode PQ or HLG AVIF, convert BT.2020 to sRGB, and tone map highlights into a viewable SDR PNG. - [Image Channel Extractor](https://elysiatools.com/en/tools/image-channel): Extract, manipulate, and analyze individual color channels (RGB, Alpha, Luminance) with professional processing options ## Samples - [PCAPNG Capture Samples](https://elysiatools.com/en/samples/pcapng-samples): Downloadable PCAPNG capture files from simple to complex for parser validation, format comparison, and network-analysis walkthroughs - [PCAP Capture Samples](https://elysiatools.com/en/samples/pcap-samples): Downloadable PCAP capture files from simple to complex for protocol inspection, parser testing, and packet-analysis demos - [Android Image Processing Java Samples](https://elysiatools.com/en/samples/android-image-processing-java): Android Java image processing examples including reading/saving images, scaling, and format conversion - [Android Image Processing Kotlin Samples](https://elysiatools.com/en/samples/android-image-processing-kotlin): Android Kotlin image processing examples including reading/saving images, scaling, and format conversion ## Related content - [Network Address Conversion and Traffic Inspection Tools](https://elysiatools.com/en/hubs/network-convert): Curated tools for network address conversion, packet inspection, and request debugging in one hub. - [Network Triage, Packet Inspection, and Endpoint Debugging Tools](https://elysiatools.com/en/hubs/network-triage-debugging): Inspect packet captures, debug webhooks, check DNS and SSL endpoints, validate addresses, and analyze user agents in one network troubleshooting hub. - [Semi-Structured Text Parsing and Table Extraction Tools](https://elysiatools.com/en/hubs/semi-structured-text-table-extraction): Turn fixed-width text, mixed-delimiter records, logs, and HTML or Markdown tables into clean CSV, JSON, XML, or Excel outputs with focused parsing and repair tools.