PacketSafari

Introduction

PacketSafari Analyzer is a web workspace for collecting, processing, and exploring packet captures with or without AI help.

Why network packet analysis?

Network packet analysis explains how devices talk to each other. Packets carry protocol headers (Ethernet, IP, TCP, HTTP, …) and payloads. Reading them helps you troubleshoot performance issues, validate security controls, and understand application behaviour without installing agents on endpoints.

What PacketSafari offers

  • Upload and process PCAP/PCAPNG. New captures are prepared automatically in the background so metadata, DNS, TLS, dashboards, and AI views become available as processing finishes.
  • Capture library. Browse private captures, shared captures, and public/community captures when your deployment exposes them, with histograms, ownership, tags, and inline download or publish controls.
  • Analyzer workspace. Filter packets with Wireshark-style expressions, inspect decode and hex views, follow streams, view connection timelines, and graph throughput or retransmissions.
  • AI assistance. PacketSafari Copilot answers questions about a capture; PacketSafari Agent can run guided investigations with tool calls, summaries, and downloadable reports.
  • Collaboration. Apply comments, tags, and roles, edit metadata, and export subsets or objects without re-uploading files.

How it works

  1. Pick or upload a capture. Start from your library, a shared or public capture if your deployment exposes one, or a demo PCAP. Uploads support .pcap, .pcapng, and .cap.
  2. Process automatically. PacketSafari prepares metadata, protocol summaries, and analyzer data in the background without any extra setup during upload.
  3. Explore in the analyzer. Use the filter bar, packet list, decode/hex, connection dashboards, IO graphs, packet stats, and export objects. Open the Agent or Copilot if you want guided findings.
  4. Share or publish. Tag captures, add comments, adjust visibility, or grant access via roles according to your deployment policy.

Contribute

  • Upload a trace, keep it private, or publish/share it when that workflow is enabled in your deployment.
  • Share deep links to filtered packet views or agent reports.
  • Browse existing traces to learn new protocols and analysis techniques.

Alternatives