Description
Kestrel Sight brings professional packet capture analysis to your iPhone and iPad.
Kestrel runs 100% on-device with no network connections.
SIGHT VERSION FEATURES
No software packet limit such as in Kestrel LITE.
Dashboard - Traffic overview with protocol distribution, encryption statistics, top talkers, and session summary.
Packets - Browse and filter packets with detailed inspection.
Raw Data Search - Query any information in its original, unprocessed format.
Flows - Bidirectional flow reconstruction showing bytes transferred, packet counts, and timing for each conversation.
Hosts - Profile every IP address with traffic statistics, port activity, and connection mapping.
DNS - Extract and search DNS queries.
Streams - TCP stream reassembly (auto-runs for files under 1GB).
Chain of Custody - Forensic session tracking.
Timeline - Visual event timeline with filtering and detailed event information.
SIGHT VERSION NOTES
Files up to 1GB: Full features with automatic TCP reassembly
Files over 1GB: TCP reassembly disabled
Files over 2GB: Raw search performance degradation
Sensitive Data Scanner - Available in PRO
File Carving - Available in PRO
Media Extraction - Available in PRO
PRO VERSION - In Development
Sensitive Data Scanner - Deep credential and secret detection across an unencrypted network.
File Carving - Extract files transmitted over an unencrypted network including images and files.
Media Extraction - View and export images found in network traffic.
Anomalies - Detects possible security issues.
SSL Certificate Import - SSL Decryption.
Exporting
Pro Features are in Development. Performance may vary based on file size and device capabilities and may be subject to change.
SUPPORTED FORMATS
PCAP
PCAPNG
IDEAL FOR
Security professionals analyzing captures in the field
Network administrators troubleshooting connectivity
Incident responders examining network evidence
Penetration testers reviewing assessment data
PRIVACY
Kestrel contains no advertising and makes no network connections.
While we have designed Kestrel with security in mind and process all data locally on your device, no software application can guarantee absolute security.
Important Notes: Kestrel processes pre-captured PCAP files only—no live network sniffing within iOS. Screenshots may blend demo and real data. Large files may extend load times for thorough analysis. Works best with devices with 8GB or more of RAM.
Demo Section: Uses fabricated sample packets for illustration.
Have suggestions, issues, or feature ideas? Email us at [email protected]—we love hearing from you!