TCP Capture Viewer
How to use this TCP capture viewer
- Export a capture as classic .pcap (in Wireshark: File → Export Specified Packets → .pcap format).
- Upload the .pcap file above.
- Use the conversation filter to isolate one connection and follow its handshake and sequence numbers.
How does this work?
Your capture file never leaves your device. It's parsed directly in the browser from the raw .pcap bytes — Ethernet, IPv4 and TCP headers are decoded locally to build a readable table, grouped by conversation and with 3-way handshakes flagged automatically.
Which capture formats are supported?
Classic .pcap (libpcap format) with Ethernet, IPv4 and TCP. The newer .pcapng format isn't supported yet, and non-TCP packets are listed but not decoded in detail.
Is there a size limit?
Everything is parsed in your browser's memory, so very large captures (hundreds of MB) may be slow. It works best for the kind of focused, few-thousand-packet captures you'd use to debug a specific connection.
What does the conversation grouping mean?
Packets belonging to the same TCP connection (same source/destination IP and port pair, in either direction) get the same color stripe and stream number, so you can follow one connection's handshake and sequence numbers without the noise of unrelated traffic.