pcapview

pcap

Fast browser-based viewer and filter for SS7, Diameter and 5G HTTP/2 SBA PCAPs.

Web UI over WebSocket that opens large telecom-signaling PCAPs, indexes them with tepacap and Redis, and streams filtered results back with tshark-level packet detail.

pcapview is a tool for browsing and filtering SS7, Diameter and HTTP/2 SBA PCAP and PCAPng files very fast. It ships an HTML/JS frontend that talks to a Python backend over WebSocket, uses a C/Python indexing module together with tepacap and Redis, and calls tshark for per-packet detail parsing.

What it does

• Browses and filters large SS7, Diameter and 5G HTTP/2 SBA PCAP / PCAPng captures from a web UI.
• Indexes PCAPs with a C/Python module backed by tepacap and Redis for fast lookups.
• Streams filtered results from a Python backend to the browser over WebSocket.
• Delegates per-packet dissection to tshark for full protocol detail.

Best for

• Analysts triaging multi-GB SS7, Diameter or 5G SBA captures interactively.
• Incident responders searching signaling traces without loading everything in Wireshark.
• Trainers and researchers exploring telecom PCAPs in a shared browser session.

Protocols: SS7, SIGTRAN, Diameter, HTTP/2, 5G SBA, PCAP, PCAPng

Inputs: PCAP file, PCAPng file, Capture directory

Outputs: Filtered packet list, Per-packet tshark dissection, Indexed session for reuse