01 / DECODE
The detail is
the difference.
Expand a protocol. Select a field. See its exact bytes.
Source port 443 selected. Bytes 01 bb.
IFI STUDIO / NETWORK TOOLS
PACKET CAPTURES. POCKET-SIZED.
Follow the conversation behind your network.
An IFI Studio tool for inspecting captures, tracing streams, and finding the detail that matters.
12,408 packets · 8.2 MB
SAMPLE CAPTURE
192.0.2.4 → 203.0.113.8
443 → 52714 [ACK] Len=0192.0.2.4 → 203.0.113.8
TLSv1.3 · Application Data192.0.2.4 → 192.0.2.1
Standard query A example.com192.0.2.4 → 203.0.113.8
443 → 52714 [ACK] Len=0192.0.2.4 → 203.0.113.8
HTTP/1.1 · 200 OKPACKET #1843
TLS 1.3 · decodedFOLLOW THE CONVERSATION
TCP · stream readyBUILT FOR THE CURIOUS. READY FOR THE COMPLEX.
From the first packet to the full conversation.
The tools you need, in a place you can take anywhere.
01 / DECODE
Expand a protocol. Select a field. See its exact bytes.
Source port 443 selected. Bytes 01 bb.
02 / REASSEMBLE
Follow reassembled TCP streams in both directions.
03 / UNDERSTAND
Traffic timelines, protocol hierarchy, and busiest endpoints.
LESS NOISE. MORE SIGNAL.
Explore an illustrative capture. Same investigative mindset. Smaller screen.
⌕ tcp.port == 443✓ Valid expressionSelect a packet to inspect its layers.
Reassembled TCP stream / illustrative HTTP payload
192.0.2.4:52714 → 203.0.113.8:80
GET / HTTP/1.1 Host: example.com Accept: text/html
203.0.113.8:80 → 192.0.2.4:52714
HTTP/1.1 200 OK Content-Type: text/html
Sample data shown. The app opens your own capture files.
FROM EVERYDAY WEB TO MOBILE CORE.
Inspect familiar protocols and specialized stacks.
Decode nested traffic, layer by layer.
WEB + TRANSPORT
TCP · HTTP/2 · TLS · QUIC
INFRASTRUCTURE
DNS · DHCP · SNMP · VXLAN
TELECOM + MOBILE CORE
SCTP · M3UA · Diameter · GTP
Coverage varies by protocol. Some compressed or schema-dependent fields remain undecoded.
YOUR NEXT INVESTIGATION STARTS HERE.
Your capture files. On-device decoding.
A clearer view, wherever the work takes you.

THOUGHTFUL TOOLS.
CLEARER UNDERSTANDING.