Best Packet Capture Series Of Conversations

CPA supports the industry-standard PCAP packet capture format for reading and writing packet trace files.

With CPA you are able to analyze, display and filter packet trace files.

A QuickLook plugin is included to get an overview over packet traces already in finder.

You cant, for example, filter to see only packets to and from a particular IP.

You can choose source IP or you can choose destination IP, but not both at the same time.

You also cant filter a negative, to remove content that you know is uninteresting, like background chatter from arp, mdns, etc.

Best Packet Capture Series Of Conversations

Those two things together are the vast majority of what youd be doing with a packet capture in the first place zeroing in on one series of conversations that youre analyzing.

It does produce the basic tcpdumppcap output, and if youre only looking for a very limited number of things, itll get the job done.

But a tcpdump -r from the command line will too, and of course supports all the filtering described above as well.

Please add a much more robust filter system that will support andornot logic to combine many different fields.

Performance is quite solid; I was able to open a gigabyte-sized packet capture and the app performed admirably and I could smoothly scroll through it.

Best Packet Capture For Mac