Free Online PCAP to CSV Converter
Convert Wireshark and tcpdump packet captures into clean CSV files directly in your browser. Fast, zero-upload, and runs completely in client-side memory.
Zero File Uploads
Files are parsed directly in client memory via HTML5 File API and TypedArrays. Your capture never touches any remote server.
Blazing Fast
Processes tens of thousands of packets in sub-seconds without requiring Python, tshark, or local command-line tools.
Excel & Pandas Ready
Outputs standardized RFC 4180 CSV with timestamps, endpoints, protocols, and sizes ready for immediate data analysis.
Convert PCAP to CSV: NetNerve vs. TShark & Python
If you usually rely on command-line utilities, here is how NetNerve's zero-upload browser converter compares to traditional methods:
tshark -r capture.pcap -T fields \
-E header=y -E separator=, \
-e frame.number -e frame.time_epoch \
-e ip.src -e tcp.srcport \
-e ip.dst -e tcp.dstport \
-e _ws.col.Protocol -e frame.len > out.csvFast, but requires installing Wireshark/TShark locally and manually specifying protocol fields.
from scapy.all import rdpcap
import pandas as pd
pkts = rdpcap("capture.pcap")
data = [{"src": p[IP].src, "dst": p[IP].dst}
for p in pkts if IP in p]
pd.DataFrame(data).to_csv("out.csv", index=False)Flexible for data science, but loads the entire capture into memory, causing high RAM overhead on large files.
Frequently Asked Questions
How does the PCAP to CSV conversion work?
The converter decodes the binary PCAP frame records (including global header, packet timestamps, Ethernet headers, IPv4/IPv6 headers, and TCP/UDP transport layers) directly inside your web browser using Web TypedArrays.
Is it safe to convert sensitive network traffic?
Yes. Because processing happens purely on the client side, your PCAP file is never uploaded across the internet. It remains safe within your local browser sandbox.
How does this compare to tshark or Python Scapy for converting PCAP to CSV?
Command-line tools like tshark require local software installation and complex flags (-T fields -E separator=,). Python Scapy can be memory-heavy on large files. NetNerve provides an instant, zero-install, zero-dependency browser interface that converts files in sub-seconds.
What fields are included in the generated CSV export?
The CSV export contains 8 core columns: Packet Number, Timestamp (ISO-8601 UTC), Source IP, Source Port, Destination IP, Destination Port, Protocol (TCP, UDP, ICMP, DNS, HTTP, TLS, ARP), and Frame Length in bytes.
Can I analyze the CSV for security incidents?
While CSVs are great for Excel and Jupyter notebooks, detecting threats like C2 beacons, brute force, and credential leaks is difficult manually. You can upload the capture to NetNerve for automated Suricata IDS signature detection and AI incident narrative generation.
Related Network Analysis Tools & Reports
View all threat teardownsIsolate RFC 1918 subnets vs. public WAN talkers.
Anonymize MACs, IPs, and payloads before sharing.
DoublePulsar & EternalBlue packet dissection.
Cloud AI vs. desktop packet sniffing.