ByteSniffer

ByteSniffer captures raw IP packets on iOS by routing all device traffic through a local VPN extension, allowing inspection of IPv4 and IPv6 traffic before any decoding occurs. It records TCP, UDP, DNS, TLS, QUIC, ICMP, HTTP and related protocols, providing a complete view of what the device sends and receives at the network layer.

The tool offers a Wireshark‑style display filter language with Boolean logic and regular‑expression support, enabling precise selection of packets across all protocols. Users can view session streams with direction indicators and colour‑coded payload previews, and a statistics dashboard presents protocol distribution, top destination IPs, packets‑per‑second graphs and other real‑time metrics.

Export options include JSON and JSONL formats for integration with external analysis pipelines, and the entire capture and analysis process runs locally on the iPhone without reliance on cloud services or desktop tools. This makes ByteSniffer suitable for network engineers and security researchers needing on‑device, protocol‑agnostic packet analysis.