Network Packet Captures Library

Network packet capture library illustration

Explore our curated collection of real-world packet captures designed to illustrate key networking concepts, protocols, and anomalies. From DNS queries to TCP errors and security events, each capture is hand-picked to support learning, troubleshooting, and deep analysis.

🔄 This library is updated regularly — new packet captures are added over time to reflect key concepts, attack patterns, and diagnostic scenarios.
Perfect for network engineers, students, and curious explorers alike.

TCP Examples

TCP simple session

A simple example showing a TCP flow with handshake, data transfer and closing.

Connection Timeout

The TCP connection to a service has failed.

Connection Aborted

The connection was aborted during the transfer of data.

Not RFC 7323 compliant

TCP window scale or timestamp option is missing.

TCP Retransmission

TCP loss may degrade the performances of data transfer.

TCP Fast Retransmission

TCP loss may degrade the performances of data transfer.

TCP Zero Window

TCP Zero Window is a condition where the receiving device tells the sender to pause sending data because its buffer is full.

Segment out of Window

The segment is out of receiver window (Spurious Retransmission is one particular case).

TCP Spurious Retransmission

An already received segment is sent again.

DNS Examples

Basic DNS Query

Standard A record request and response using UDP port 53.

Name Error

A DNS name error occurred (also known as NXDOMAIN).

No server response

DNS queries did not get any response.

Server failure

The DNS server failed to process a query.

DNS Retransmissions

Some DNS requests were retransmitted.

Truncated Message

Some DNS messages exceeded the allowed size.

Request Refused

A query was refused to be processed by the server.

DNSSEC

DNSSEC (Domain Name System Security Extensions) is a security protocol that protects the DNS (Domain Name System) from attacks like spoofing or cache poisoning.

ICMP Examples

Server Port Unreachable

A service listening on UDP is not available.

ICMP Ping losses

Ping is a tool used to measure latency and losses.

Client Port Unreachable

Client is not expecting any more server responses.

TLS Examples

TLS Handshake

Handshake including ServerHello, Certificate, and key exchange.

TLS Alert Protocol version

Unsupported or deprecated TLS version.

TLS Alert Decode error

Malformed or improperly formatted TLS message.

TLS Alert Unknown Certificate Authority

The Certificate Authority (CA) is not trusted.

TLS Alert Handshake failure

Could not establish a secure connection during the TLS handshake.

TLS Alert Internal error

Unexpected internal failure while processing a TLS handshake or data exchange.

Internet Protocol (IP) Examples

Not ECT compatible

At least one peer is not ECN-Capable Transport (ECT) compatible..

TTL Change

Different TTL values were observed for at least one session..

Multicast IP addresses

Multicast IP addresses are used to send data to multiple devices simultaneously over an IP network.