Cocoa Packet Analyzer is a native Mac OS X implementation of a network protocol analyzer and packet sniffer. CPA supports the industry-standard PCAP packet capture format for reading, capturing and writing packet trace files.

Features:

• Basic packet capturing (libPCAP/ tcpdump filter expressions can be used).
• Analyze, display and filter packet trace files.
• Supports PCAP packet capture format.
• Quicklook plugin included - it is basic but at least you can get an overview over packet trace files in finder.
• Intel 64-bit CPU support.

Supported Types and Protocols:

• Ethertype ARP
• Ethertype IP (v4/ v6)
• Ethertype PPP
• Ethertype PPPoED/S
• Ethertype 802.1Q VLAN
• Linktype Loopback
• Linktype PPP

• IP-Protocol IP
• IP-Protocol TCP
• IP-Protocol UDP
• IP-Protocol ICMP
• IP-Protocol IGMP
• IP-Protocol L2TP

• PPPoE Discovery and Sessionstages
• PPP-Protocols: IP, LCP, IPCP, CCP, PAP, CHAP
• L2TP-Protocol (port based detection)
• RADIUS-Protocol (port based detection)
• SIP-Protocol (third party analyzer plugin)
• ICMPv6 Protocol (third party analyzer plugin)
• IAX2 Protocol (third party analyzer plugin)
  

Screenshots:
Overview
Capturing
Preferences
RADIUS details
L2TP details
PPP-LCP details
PPP-IPCP details
PPP-PAP details
IPv6 details
Columns
Search


Downloads:
Version 0.67
What's new?



Requires:
Mac OS X 10.5 or later

Some plans for 1.0 release:

• More protocols
• Nice name (suggestions?)
• Fancy GUI & icon(s) (wanna help?)
• Localizations
• Scripting
• Printing support