PCAP WORKBENCH · COMPETITOR COMPARISON
Loosha PCAP Workbench 1.8.7 vs WireEdit.
Capture-editing capabilities compared. WireEdit entries reflect vendor documentation and claims; “not documented” means the public documentation does not mention it.
| Capability | Loosha PCAP Workbench (1.8.7) | WireEdit (3.15.701) |
|---|---|---|
| Protocol decoding breadth | Wireshark/tshark dissector tree with field values and byte offsets; dedicated editors for TLS ClientHello, QUIC Initial (decrypt/re-encrypt), HTTP/2 headers, DHCPv6, SCTP chunks, NGAP/S1AP (APER re-encode) | Own full-stack decoder; any decoded layer editable (vendor claim); 4G/LTE mobile core (SS7, RANAP, Diameter, VoLTE) and ASN.1 protocols stated |
| Click-to-edit field UX | Edit in place in tree or hex; preview, commit, undo/redo | WYSIWYG "word processor for packets" (vendor description) |
| Length / checksum recalculation | After every edit and via Fix All; each length, count and checksum is a separate switch | Lengths, checksums, offsets and inter-packet dependencies recalculated on the fly (stated); per-field control not documented |
| DNS section counters | Always derived from records; can be switched off | Not documented specifically |
| TCP stream edit with SEQ/ACK cascade | Edit TCP payload → Apply to stream; also follows TLS/HTTP/2 and SIP-over-TCP edits | General "all affected packets" claim; TCP specifics not documented |
| Edit reassembled IP fragments | Yes | Yes |
| SIP call view / edit | Call list, ladder, RTP/RTCP, export; Content-Length; Apply to call: Call-ID, From/To/Contact URI and tags rewritten in every message | Not documented (VoLTE support stated) |
| GTP session-wide edit | GTP-U/v1/v2-C auto-fix; Edit GTP TEID → Apply to session (TEID + owner IP) incl. GTPv2-C F-TEID IEs; TEID in NGAP/S1AP | Mobile core stated; session-wide TEID not documented |
| Tunnels | GTP-U, VXLAN, GRE, GENEVE, IP-in-IP, MPLS (in UDP/IP, pseudowire, in GENEVE): inner/outer fixes; also in filters | Any layer editable (stated); tunnels not listed |
| Structural edits | DNS records, DHCP/DHCPv6 options, SIP headers, IPv6 ext. headers, SCTP chunks insert/remove; templates; delete/duplicate/reorder | Add/delete optional and conditional fields (FAQ) |
| Compare captures | Built-in Compare tab | Documented HowTo (Windows) |
| Session multiplier / scale | Scale tool (unlimited: Full edition) | Separate product FlowCoder |
| Batch / automation | Recipes, headless CLI, CI exit codes | CLI version available |
| AI assistant / MCP | Built-in MCP server (stdio and Streamable HTTP, token, read-only/audit modes) | Not documented |
| Works fully stand-alone | Yes: GUI, CLI, recipes offline; MCP optional | No AI dependency documented; on-prem for qualified customers |
| Send to network / replay | Built-in sender (Npcap / AF_PACKET), pacing, loops + response matching | Separate product FlowCoder |
| Platforms | Windows; Linux build available upon request | Windows, Linux |
| Licensing | One package: Community without license; Full via hardware-bound perpetual license (updates until date) | Eval license; commercial from $2,499–3,499/user/year |