Packet capture tooling
PCAP repair and evidence workbench for protocol engineers.
Inspect capture metadata, packet evidence, and controlled rewrite workflows from a desktop tool built for careful PCAP surgery, not broad protocol-player sprawl.
Built for engineers who need repeatable packet-capture evidence review before they rewrite, trim, or hand off captures.
PCAPcapture evidence
Directwebsite builds
Linuxpublished now
PCAP Surgery status
Website downloads Available
Linux direct artifacts are published through the Hannes Software website release manifest.
Windows and macOS Supported target OS
Builds are part of the direct release matrix and must be produced on the target operating system.
Store builds Not in current dispatch
Current public distribution is website/direct only.
Workflow
Designed around capture evidence and controlled edits.
Review packet evidence and parser observations
Apply controlled rewrite workflows only when the evidence supports the edit
Publish website/direct packages through the Hannes dispatch pipeline
Editions
Website direct builds are available.
Community
Local capture inspection and validation workflows for small PCAP surgery tasks.
- Capture metadata review
- Packet evidence inspection
- Controlled local workflows
- Website direct downloads
$19 Lifetime
One-time lifetime license for paid desktop workflows when the product gate requires it.
- Online license activation
- Offline license file support
- Signed license verification
- Direct desktop builds
Team seats
Same desktop capability model as the lifetime license, fulfilled as multiple license keys under one billing email.
- Stable license keys
- Multiple machines per key
- Automatic oldest-device replacement
- No machine code shown to buyers
Current boundaries
- Store distribution is not part of the current dispatch target
- Windows and macOS artifacts must be built on their target operating systems
- Do not treat the tool as a general Wireshark replacement
- Destructive edits should stay evidence-led and reproducible
Before using PCAP Surgery
Can I download PCAP Surgery today?
Yes. The current website/direct release publishes Linux artifacts. Windows and macOS are supported target platforms and should be built on those operating systems.
Can I use a Hannes license key?
Yes. The desktop license flow uses email plus license key. Machine fingerprints are collected internally by the app and are not part of the buyer-facing workflow.
Is this an App Store or Microsoft Store build?
No. The current distribution target is the official website direct build only.