ICS / Modbus Traffic Analyzer

Paste a captured ICS/SCADA traffic log — a tshark or Wireshark CSV export, or any ts src dst proto func-style text — and this tool parses it entirely in your browser and flags the patterns that matter on an operational network: unauthenticated Modbus writes, function-code scanning, exception floods, writes from outside the cell zone, broadcast writes, off-hours activity, cleartext credentials and new talkers. Modbus and DNP3 are recognised; a small classic .pcap can be parsed inline too. Your data never leaves the page — there is no upload and no scanning of any live network.