Read every frame.
Edit every byte.
Trust every fix.
A byte-editable hex dump for .pcap and .pcapng captures. Decode, edit, craft, and fix.
See it in under 5 minutes
Watch a frame get crafted
One workbench, byte-first
All features →Edit bytes
Change any byte. The health check fixes lengths and checksums.
Craft frames
Build TCP, UDP, DNS, ICMP, ARP and HTTP from fields, not hex.
Decode and analyze
Layer-by-layer decode, TLS and QUIC decrypt, conversations, IO graph.
Private by design
No telemetry. Captures never leave your machine. Air-gapped? Ask us about an offline license.
Recently added
All features →A whole connection in one line
Stream(client=..., server=..., messages=...) builds the handshake, the messages, the ACKs and the close with real timing. Vary it in a Series (100 streams on 100 ports), fuzz one message of it, add lost or reordered segments, or start from ready-made SMTP, FTP, WebSocket, HTTP/2 and TLS exchanges.
A Craft lab you can arrange
The Result of every tab sits under its settings, and any card can be detached into its own window to keep in view. Long expressions wrap and one click lays them out.
Frames built layer by layer start right
Add Ethernet, IPv4 and TCP from the palette and each layer starts with real values: the protocol and ports are set, and lengths and checksums are worked out for you.
A payload viewer that reads the whole message
HTTP, HTTP/2, SIP, SMTP and FTP laid out in full, put back together from every frame they span, and shown decrypted once a TLS stream is decrypted.
Licenses tied to the computer
The saved activation is encrypted with your operating system's own protection, so a copied license and data folder do not carry over. Seats can be given back with one click.
Moving to a new computer
Remove license on the old one and activate on the new one right away. Lost or wiped machines can be released by support.
Pick a tier
Each tier contains the one before it. Start from what you do with a capture: read and fix it, generate and send traffic, or hand the result on. Every tier includes a year of updates and support, licensed directly by Netomize.
Choose Analyst if you investigate and fix captures, or put together the odd frame by hand: troubleshooting, forensics, incident review, teaching.
Choose Crafting if you make traffic often, or in bulk: guided builders, generated series, fuzzing, and sending it onto a test network.
Choose Complete if you hand decrypted evidence to other people, want one set of Expert findings rules for a whole team, or want ready-made protocol scenarios and shareable packs for a test lab.
What each tier includes
Every tier opens, decodes and edits any capture, and can put frames together by hand. The higher tiers add guided builders, generated traffic and sending, then decrypted evidence and shared rules.
| Feature | AnalystUS$500 | CraftingUS$900 | CompleteUS$1,300 |
|---|---|---|---|
| Read, edit and analyze | |||
| Decode and byte-edit any capture, with undo and redo | |||
| Expert findings with the built-in checks and adjustable thresholds | |||
| Expert findings reports: text, ticket, HTML, CSV, JSON, SARIF | |||
| Health check, Streams, Conversations, Hosts and ports | |||
| Build frames by hand, layer by layer, from the template palette | |||
| Craft lab, one frame at a time, with a live preview | |||
| Batch apply and Rewrite addresses | |||
| Read decrypted TLS, DTLS and QUIC with a key log | |||
| Build and send traffic | |||
| Guided packet builders: stream, DNS, ICMP, ARP, HTTP | – | ||
| Craft lab: series, mutate and fuzz, and whole TCP and UDP streams in expressions | – | ||
| Send to a network through Npcap, with safety limits | – | ||
| Evidence and teamwork | |||
| Save decrypted TLS, DTLS and QUIC traffic as a pcap | – | – | |
| Load decrypted streams into the frame table | – | – | |
| Craft lab scenarios: ready-made SMTP, FTP, HTTP/2, TLS, page-load and scan exchanges | – | – | |
| Craft lab packs: share named sets of conversations as a file | – | – | |
| Write custom Expert findings rules and share them as files | – | – | |
| Read rules from a shared folder, from Preferences | – | – | |
| See how every built-in Expert rule decides | – | – | |
| Support | |||
| A year of updates and standard support | |||
| Priority support | – | – | |
Prices in USD, before tax. Not sure which one? Request an evaluation or contact us; volume pricing is available.
Get Frame Bench
No public installer. Tell us your platform and tier and we will send a quote and your build.
All Rights Reserved © Netomize