VisualEther · Wireshark PCAP analysis for humans and AI

Wireshark shows the packets.
VisualEther shows the answer.

Turn a Wireshark capture into a sequence diagram you can read at a glance — then point Claude Code at it and ask “why did it fail?” in plain English. Built for 5G developers, test engineers, and network professionals.

VisualEther turns a Wireshark capture into a 5G NR sequence diagram (UE and gNB with RRC messages and per-message parameter tables) on the left, while Claude Code reads it on the right — a cross-layer analysis of moto_edge_30_pro.pcap that traces an RLC poll-retransmission storm on RRC Release to a lost UE.
How it works

From capture to answer in four steps.

  1. A Wireshark packet list of a 5G NR capture, filtered to the RRC signaling messages.

    01 Capture

    Record PCAPs on every CI/CD run, then turn VisualEther loose on them.

  2. A 5G NR RRC sequence diagram rendered by VisualEther — UE and gNB as columns with RRC Setup Request and RRC Setup message arrows, each annotated with a key-parameter table.

    02 Diagram

    Read each run as sequence diagrams — whole-capture overview down to a single session.

  3. VisualEther session-outcome charts per session type — IP-FLOW, MAC-UE, NAS-5GS, RRC-CONNECTION, SDAP-BEARER and SIP — each pie split between Timeout and Incomplete.

    03 Triage

    VisualEther classifies every session by outcome, so the failures surface first.

  4. A Claude Code case-study turn: asked to walk through the complete flow, Claude summarizes one UE across three connection episodes — a full attach with IMS registration plus two short re-accesses.

    04 Diagnose

    Point Claude Code at the failed sessions and ask why — it debugs them in plain English.

See the full workflow
What the case studies show

Claude Code drives VisualEther — author, debug, verify.

Each case study is a real user–Claude Code session — you watch this loop play out, prompt by prompt, on an actual capture.

  • Author

    Claude Code writes the VisualEther templates that map a raw PCAP into session-level sequence diagrams.

  • Debug

    When a session fails in a CI/CD run, Claude Code reads the diagram and names what broke — with the frame numbers to back it.

  • Verify

    After the fix, Claude Code re-analyzes the new capture through the VisualEther MCP to confirm the flow comes back clean.