Products Free
AZET Packet Analyzer
Open a packet capture and see what happened on the network: alerts, HTTP requests, DNS lookups and TLS connections. The analysis runs inside your browser, so the file never leaves your device.
What it does today
Your file stays on your device
The capture is read and analyzed by the page in your browser. pcap.azet.io serves only static files (the page, the engine and the rules), and the page’s Content Security Policy,
connect-src 'self', leaves it no way to send your file anywhere else.Sessions, HTTP, DNS and TLS
TCP sessions are reassembled, then HTTP, DNS and TLS are parsed: the requests made, the domains looked up, the sites connected to, and the files transferred with their SHA-256.
Suricata rules, in the browser
It evaluates the Emerging Threats Open rules for Suricata that its engine supports, about 50,000 of them. AZET’s test on a public malware-traffic sample (9 October 2026) gave the same alerts as Suricata: 17 of 17 and 204 of 204.
Rules refreshed daily
A new Emerging Threats Open rule set is fetched and published every day, so the next file you open is checked against it.
Evidence and what to do
Each alert lists its source and destination, the MITRE ATT&CK technique, the session it came from and what to do next.
Your indicators and reports
Paste IP addresses, domains and SHA-256, SHA-1 or MD5 hashes to look for, add your own rule file, or drop a rule’s alerts with
sid:N. Export the result as an HTML report or CSV.
Files it opens. pcap and pcapng with Ethernet, Linux, loopback and raw IP link types. A Suricata eve.json file opens in the same views.
Only captures you may analyze. Open captures from your own devices, from networks you manage, or ones you have permission to analyze. Capturing or reading other people’s communications without consent is against the law in many countries, including Korea.
Not yet
- Live capture. It analyzes saved files only. It does not capture traffic from a network interface.
- Every Suricata rule. Rules that need features the engine does not evaluate yet, such as SMTP and RDP parsing, JA3 hashes or stream size, are skipped, so a few alerts Suricata would raise do not appear.
- An English interface. The screens are in Korean for now.
AZET Packet Analyzer helps you read a capture. It does not watch your network, and a capture with no alerts is not proof that nothing malicious happened.
At a glance
| Status | Live at pcap.azet.io · free |
|---|---|
| Operated by | AZET LLC |
| Platforms | A web browser; nothing to install |
| Files | pcap, pcapng and Suricata eve.json |
| Account | None |
| Your data | Files are analyzed in your browser and are not sent to AZET |
| Detection rules | Emerging Threats Open (BSD license), refreshed daily |
| Language | Korean |
| Help | hello@azet.io |
Open a capture in your browser.
Open the analyzerFree · no install, no sign-up · the file stays on your device