Tracebastion: PCAP Lab is a focused, fully on-device app. An offline PCAP and PCAPNG workbench for inventorying captures, decoding common link and network headers, following conversations, filtering traffic, and exporting evidence reports.
KEY FEATURES
- Open classic PCAP and PCAPNG captures from Files
- Decode Ethernet, IPv4, IPv6, TCP, UDP, ICMP, and DNS headers
- Filter by protocol, address, port, length, and timestamp
- Summarize endpoints, conversations, retransmission hints, and bursts
- Export a redacted capture inventory and conversation report
- Complete bundled sample and local comparison workflow
- Local PDF report and Apple system share export
- Original offline technical reference library
ONE-TIME AND PRIVATE
- One paid download; no subscription or in-app purchase
- No account, advertising, analytics, tracking, or developer-operated backend
- Core features and bundled content work offline
- Work remains on device unless you deliberately share or export it through an Apple system interface
Use Tracebastion only on captures you are authorized to inspect. Protocol summaries are diagnostic evidence, not proof of identity, intent, compromise, or legal attribution.
