Designed in the UK
TARGETING LATE Q4 2026Release date and final specification to be confirmedJoin the launch list for the planned 10% offer
← The Acorn overview

The Acorn application guide

Network Workbench

A public capture from July 2013 contains 1,434 packets, 14 IPv4 conversations and 16 endpoints. Review its network summary, then inspect the DNS and HTTP records. The example is historical traffic, not a live interception.

Public training example

Inspect conversations in a saved packet capture

Example input

  • A public historical packet capture; PCAP and a converted PCAPNG were processed in the recorded checks.

Result or controls shown

  • Endpoint and conversation tables with demonstrated DNS and HTTP CSV output paths.
Network Workbench summarises an unmodified public training capture containing 1,434 packets. The native report shows 14 IPv4 conversations and 16 endpoints; the capture dates from July 2013. The addresses are historical observations, not an allegation of malicious activity. View full screen
Network Workbench summarises an unmodified public training capture containing 1,434 packets. The native report shows 14 IPv4 conversations and 16 endpoints; the capture dates from July 2013. The addresses are historical observations, not an allegation of malicious activity.

Enlarge the screenshot to read the source records.

Examination steps

Steps to review in your evaluation

  1. Open the capture and review its basic processing coverage.

  2. Inspect endpoints, conversations and related protocol summaries.

  3. Use those summaries to choose packets or activity for a more detailed examination.

Related application guides

Forensic WorkbenchEvent Log ViewerMalware TriageAll forensic apps

Start with your requirements

Request an application demo

Tell us the source type and task you want to examine. We can plan a demo using suitable training material. Do not send confidential evidence.

Zoom in, then scroll to inspect the detail.

Open full-resolution image ↗

A useful first conversation

Let’s look at your workflow

Tell us what you examine, where you work and what you need to deliver.

Use the enquiry form to outline your role, intended use and potential order quantity. Do not send case material through a general enquiry.

Open the enquiry formEmail info@sqfr.uk

Your enquiry goes to the SQFR team. Please do not include passwords or case evidence.