All changes and improvements to PCAP Analyzer, newest first. Each entry shows the version, the deployment date and time, and whether it is a new feature or a fix.
Every sub-page now shows the suite favicon, and cookie use follows a GDPR consent banner: non-essential cookies are only set after you choose “Accept”, while “Decline” keeps everything session-only. The strictly-necessary consent cookie remembers your choice.
The feedback button now opens a single shared form on the tools index. You can pick the app from a dropdown, so all suggestions and bug reports arrive in one place.
The privacy tiers were clarified: green now explicitly covers tools that make stateless server calls (nothing is stored), and blue is reserved for tools that persistently store user data on the server - currently none do.
Unified the suite look: the app now shares the common design system with every other tool — the same colours, fonts and footer, plus a new top bar to switch between tools.
Refined the privacy-category descriptions: the green indicator now notes that nothing is stored and any server calls are stateless, and the blue indicator states that data is stored persistently on the server.
The footer now shows a privacy indicator for this tool: a green dot means it runs entirely in your browser, a yellow dot means it keeps data on your device, and a blue dot means it stores results on the server.
PCAP Analyzer leaves beta and is released as stable version 1.0 — the beta badge is gone. This first major release bundles the complete feature set: packet-size & fragmentation analysis, TCP stream following, security analysis (C2 beacons, external destinations, exfiltration indicators) and full application-layer decoding — all processed entirely in your browser.
Removed a stray “0” that could appear between the security analysis and the findings when a capture contained no DNS, HTTP or TLS hosts. External-destination analysis now also covers cloud/CDN/ISP hosts correctly.
New packet-size & fragmentation analysis: jumbo and oversized frames, fragmented datagrams, MTU issues and an IP-size histogram. New TCP stream following: per-connection bytes per direction, handshake timing and a per-event timeline with detected protocols. New security analysis: periodic/C2 beacon connections, unexpected external destinations with offline geo categorization (cloud, CDN, ISP, country) and exfiltration indicators — large uploads, long-lived sessions and DNS tunnelling.
New application-layer analysis per protocol: HTTP response codes, redirects and authentication failures, SMB logon failures with dialects and shares, LDAP bind failures, SMTP/FTP authentication issues and SSH server banners with versions.