{"id":15564,"date":"2026-05-15T08:42:44","date_gmt":"2026-05-15T12:42:44","guid":{"rendered":"https:\/\/www.netwitness.com\/?post_type=glossary&p=15564"},"modified":"2026-05-22T03:36:04","modified_gmt":"2026-05-22T07:36:04","slug":"pcap-packet-capture","status":"publish","type":"glossary","link":"https:\/\/www.netwitness.com\/ja\/cyber-glossary\/pcap-packet-capture\/","title":{"rendered":"PCAP (Packet Capture)"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What is PCAP (Packet Capture)?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

PCAP (Packet Capture) is a networking practice and file format involving the interception, recording, and storage of data packets traveling across network infrastructure, enabling IT teams and security analysts to capture raw network traffic for detailed analysis of network behavior, performance troubleshooting, security investigations, and forensic examination of potential intrusions. <\/span>This fundamental network monitoring technique creates PCAP files <\/span>containing<\/span>\u00a0packet headers, timestamps, payload data, source and destination IP addresses, protocol information, and complete packet contents that provide irrefutable evidence of network activity, making packet capture the ultimate source of truth about what\u00a0<\/span>actually transpired<\/span> on networks.<\/span><\/p>

Modern packet capture<\/a> solutions have evolved from simple packet sniffing tools into sophisticated network detection and response (NDR)<\/a> components that selectively capture relevant packets, integrate with SIEM workflows, and extend retention periods from days to months through intelligent filtering mechanisms.\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Synonyms<\/h2>\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t