Blog

Practical notes on packet investigation.

Field-tested guides on reading captures, turning messy evidence into findings, and keeping sensitive analysis local — written for network engineers, SOC analysts and incident responders.

Packet analysis

How to Diagnose an OSPF Adjacency From a Packet Capture

An OSPF neighbor that won't reach Full is usually one of a few problems — and the capture shows which. Here's how to read the adjacency straight from the packets.

Jul 16, 2026 · 9 min read

Guides

What an “Open-Only” BGP Capture Really Means

You capture a BGP session and see the OPEN — then nothing. Is the peer down, or did you just miss the rest? Here's how to read it without jumping to conclusions.

Jul 14, 2026 · 7 min read

Packet analysis

Connecting a Routing Event to Application Impact

A prefix was withdrawn — so what broke? Getting from a control-plane event to real application impact is where investigations stall. Here's how the evidence connects them.

Jul 11, 2026 · 7 min read

Packet analysis

How to Read a PCAP Without Drowning in Rows

Opening a big capture and scrolling from the top is how investigations stall. Here's a repeatable four-step way to get from a raw PCAP to a defensible conclusion.

Jul 3, 2026 · 8 min read

Guides

Turning FortiGate Logs and Hex Dumps Into Packet Evidence

Real investigations rarely start with a tidy PCAP. Often all you have is a firewall log or a hex dump pasted into a ticket. Here's how to turn that text into packet evidence.

Jun 28, 2026 · 7 min read

Local-first security

Why Sensitive Packet Captures Shouldn't Leave the Analyst's Machine

A lot of packet captures simply cannot be uploaded to a cloud service. When your tool requires it, you're stuck exactly when the analysis matters most. The case for local-first.

Jun 20, 2026 · 6 min read

Put these ideas to work on your own captures.

PacketSense brings import, inspection, guided investigation and reporting into one local-first workflow. Request pilot access to try it on real evidence.

Request pilot access Explore the product