ChatTCP: Simplifying Your TCP Analysis

Initially, ChatTCP only supported viewing and analyzing TCP traffic in PCAP. The 'TCP' in the name refers to the TCP protocol, indicating that it is a TCP analysis tool. 'Chat' refers to the tool's core feature—a chat-like interactive interface. Thus, the name ChatTCP.

With the iteration of features, ChatTCP can now view not only TCP packets but also UDP packets in PCAP files. However, due to the different concepts of TCP and UDP, they are not merged together but separated into different traffic pages.

In addition to viewing TCP and UDP packets in PCAP, ChatTCP also provides PCAP network analysis reports.

ChatTCP can automatically analyze connection anomalies, such as incomplete handshakes, client/server initiated disconnections, retransmission packets, unacknowledged packets, etc. It calculates connection latency, packet loss rate, and retransmission rate. For application layer, it currently supports HTTP protocol diagnosis, automatically analyzing HTTP anomalies like status codes, request headers, and response headers.

The AI diagnostic analysis assistant converts packets into structured data, decodes application layer protocol data, and provides basic analysis data, enabling AI to understand packets and perform further reasoning analysis, extending ChatTCP's diagnostic analysis capabilities.

ChatTCP currently supports decoding of HTTP, WebSocket, Redis, MySQL, DNS, and other protocols, but does not support TLS protocol decoding.

In addition to the default supported protocols, you can also use ChatTCP's protocol decoding plugin feature to write JS scripts to decode custom application-layer protocols.

There's no functional difference between ChatTCP online version and the APP, but they differ in implementation.

The online version requires uploading pcap files to the server for analysis, while the APP analyzes locally offline. If you're concerned about privacy data leakage in pcap files, we recommend downloading the APP for use.

MCP is provided by the online version, and using MCP Server requires uploading files to the server.

ChatTCP has a low barrier to entry - it can be used without understanding TCP protocol and helps users learn TCP protocol through usage, while Wireshark requires users to first master TCP protocol and application-layer protocols before use, making it more challenging. ChatTCP has fewer features, focusing only on high-frequency usage needs, while Wireshark is more feature-rich and professional!

We strictly adhere to our privacy policy and will not leak private data from user-uploaded PCAP files in the online version. Our APP performs offline local analysis and does not collect user data.

Please note that the APP's AI diagnostic analysis assistant feature requires interaction with AI models, so we recommend confirming there's no sensitive privacy data before using the AI diagnostic analysis assistant.