Description
Kestrel LITE brings professional packet capture analysis to your iPhone and iPad.
Kestrel runs 100% on-device with no network connections. No accounts and no cloud uploads.
LITE VERSION FEATURES
- Dashboard - Traffic overview with protocol distribution, encryption statistics, top talkers, and session summary.
- Packets - Browse and filter up to 50,000 packets with detailed inspection including headers, flags, and hex/ASCII payload view.
- Flows - Bidirectional flow reconstruction showing bytes transferred, packet counts, and timing for each conversation.
- Hosts - Profile every IP address with traffic statistics, port activity, and connection mapping.
- DNS - Extract and search DNS queries.
- Streams - TCP stream reassembly for files under 1GB.
- Chain of Custody* - Forensic session tracking.
- Timeline - Visual event timeline with filtering and detailed event information.
SUPPORTED FORMATS
- PCAP
- PCAPNG
IDEAL FOR
- Security professionals analyzing captures in the field
- Network administrators troubleshooting connectivity
- Incident responders examining network evidence
- Penetration testers reviewing assessment data
PRIVACY
Kestrel contains no advertising and makes no network connections.
While we have designed Kestrel with security in mind and process all data locally on your device, no software application can guarantee absolute security.
Important Notes: Kestrel processes pre-captured PCAP files only—no live network sniffing within IOS. Screenshots/Demo blend demo and real data. Large files may extend load times for thorough analysis.
Have suggestions, issues, or feature ideas? Email us at [email protected]—we love hearing from you!