Turn packets into evidence your team can use.

Start a live capture

1. 1. Choose an interface.

   Select Wi-Fi, Ethernet, Thunderbolt, VPN, tunnel, or loopback.

2. 2. Reproduce the problem.

   Keep the time window short so the useful traffic stays obvious.

3. 3. Stop and narrow.

   Group by app, domain, or IP, then filter to the protocol or error.

Open PCAP and PCAPNG

Open an existing capture for local analysis. The source file is not automatically uploaded to Rockxy or an AI service.

Filter and inspect

Use all-traffic, DNS, TCP, UDP, TLS, HTTP, HTTP/2, QUIC, WebSocket, and error views. Inspect packet fields and payload bytes without losing the source app context.

Export focused evidence

Export only the retained packets needed to reproduce the finding. Review the PCAP for credentials, tokens, and private payloads before sharing.