Blog

Practical notes on packet investigation.

Field-tested guides on reading captures, turning messy evidence into findings, and keeping sensitive analysis local — written for network engineers, SOC analysts and incident responders.

Packet analysis

How to Read a PCAP Without Drowning in Rows

Opening a big capture and scrolling from the top is how investigations stall. Here's a repeatable four-step way to get from a raw PCAP to a defensible conclusion.

Jul 3, 2026 · 8 min read

Guides

Turning FortiGate Logs and Hex Dumps Into Packet Evidence

Real investigations rarely start with a tidy PCAP. Often all you have is a firewall log or a hex dump pasted into a ticket. Here's how to turn that text into packet evidence.

Jun 28, 2026 · 7 min read

Local-first security

Why Sensitive Packet Captures Shouldn't Leave the Analyst's Machine

A lot of packet captures simply cannot be uploaded to a cloud service. When your tool requires it, you're stuck exactly when the analysis matters most. The case for local-first.

Jun 20, 2026 · 6 min read

Put these ideas to work on your own captures.

PacketSense brings import, inspection, guided investigation and reporting into one local-first workflow. Request pilot access to try it on real evidence.

Request pilot access Explore the product