TracePcap

TracePcap is a self-hosted PCAP analysis platform for reconstructing what happened on a network purely from packet captures, with no prior documentation required. It maps device topology interactively, reconstructs sessions, performs deep packet inspection for application and risk identification, and uses a local LLM to generate incident narratives and Wireshark/tcpdump filters from plain-language questions, running fully offline. It is aimed at incident responders, network security analysts, and penetration testers working from traffic evidence alone.