PCAP to CSV converter
To convert PCAP to CSV, drop your PCAP file in the box below. It converts straight away; press Download to save the CSV. It all happens in your browser, so your file stays on your device.
Convert to
What changes
| PCAP to CSV | What happens |
|---|---|
| Read | PCAP in both byte orders, with microsecond or nanosecond times |
| Columns | No., time from the first packet, absolute time (UTC), source, destination, protocol, length, info |
| Decoded | Ethernet and VLAN tags, Linux cooked captures, raw IP, loopback; IPv4 and IPv6, ARP, ICMP, TCP, UDP, DNS, DHCP, HTTP/1.x, TLS Client Hello (server name), QUIC |
| Size | The first 1,000,000 packets are listed; the rest are counted. Files of any size are read in pieces |
| Spreadsheet safety | Cells that start with = + - or @ get a ' in front |
How to convert PCAP to CSV
- Add your PCAP. Drop the file in the box, or click to choose it. It becomes CSV straight away.
- Check the result. Look at the preview. The delimiter and value types are set for you; change them if needed.
- Download. Press Download to save the CSV.
Read a packet capture from tcpdump or Wireshark as a table: one row per packet, in a spreadsheet, without installing Wireshark.
Questions
No. It is read in your browser, on your own device. Captures often hold private traffic, so nothing leaves the computer.
No. Encrypted traffic stays encrypted; what a capture shows in the clear, such as the server name a browser asks for, is listed.
Open the capture in the file viewer: the list there sorts, filters and searches every column. The CSV opens in Excel and Sheets too.
No. The conversion happens right in your browser, so your file stays on your device. There is no account to make, either.