Parser Cap

ParserCap is a visual tool to analyze network traffic, designed for information security professionals, system administrators, students, etc. who have the need to perform technical analysis of traffic recorded in PCAP (libpcap - ETHERNET and IEEE 802.11) format. It is also possible to create filters for searching keywords in TCP headers (Documents, Multimedia, Files, Logins, Passwords, etc.). If necessary, view detailed statistics for each MAC address, including COOKIES, USER-AGENTS, HTTP GET/POST and more.

Quick overview of features:

• Display sessions for HTTP requests
• Detailed viewing of selected MAC address from downloaded file (showing COOKIES, USER-AGENTS, network name of selected host, etc.)
• View DNS queries for each MAC address
• Load data recorded by airodump-ng, kismet and other utilities
• Showing the name of servers working via HTTPS (SSL)

Additional utilities included in the program:

• Search by MAC address (manufacturer and vice versa)
• JSON converter
• URL links converter
• Conversion of UNIX time into a standard time and date display.

Preliminary protocol analysis (support IP4 and IP6) and IEEE 802.11:

• ARP - DNS (v. IP4)
• LLNMR (v. IP6)
• MDNS (v. IP6)
• DHCP (v. IP4)
• HTTP Headers (v. IP4)