PCAPNG to CSV converter
To convert PCAPNG to CSV, drop your PCAPNG file in the box below. It converts straight away; press Download to save the CSV. It all happens in your browser, so your file stays on your device.
Convert to
What changes
| PCAPNG to CSV | What happens |
|---|---|
| Read | PCAPNG sections, interfaces with their own time resolution, enhanced, simple and old packet blocks |
| Columns | No., time from the first packet, absolute time (UTC), source, destination, protocol, length, info |
| Decoded | Ethernet and VLAN tags, Linux cooked captures, raw IP, loopback; IPv4 and IPv6, ARP, ICMP, TCP, UDP, DNS, DHCP, HTTP/1.x, TLS Client Hello (server name), QUIC |
| Size | The first 1,000,000 packets are listed; the rest are counted. Files of any size are read in pieces |
| Spreadsheet safety | Cells that start with = + - or @ get a ' in front |
How to convert PCAPNG to CSV
- Add your PCAPNG. Drop the file in the box, or click to choose it. It becomes CSV straight away.
- Check the result. Look at the preview. The delimiter and value types are set for you; change them if needed.
- Download. Press Download to save the CSV.
Turn a Wireshark capture (.pcapng) into a table of packets you can sort and filter in Excel or Sheets.
Questions
PCAPNG is Wireshark’s newer format: it can hold several interfaces, comments and names in one file. Both become the same table here.
No. It is read in your browser, on your own device. Captures often hold private traffic, so nothing leaves the computer.
No. Encrypted traffic stays encrypted; what a capture shows in the clear, such as the server name a browser asks for, is listed.
Open the capture in the file viewer: the list there sorts, filters and searches every column. The CSV opens in Excel and Sheets too.
No. The conversion happens right in your browser, so your file stays on your device. There is no account to make, either.