pcapd

JSON
executablemacOS277.5 KBx86_64, arm64

Network packet capture library — provides raw packet capture capabilities

Implements low-level network packet capture functionality for monitoring and analyzing network traffic. Provides APIs for capturing raw packets from network interfaces and filtering traffic based on packet criteria. Exposes an XPC service for other processes to request packet capture operations. Supports both Intel and Apple Silicon architectures and communicates with multiple network endpoints for configuration or data relay.AI

Fingerprint

Platform
macOS
Type
executable
Arch
x86_64, arm64
Min OS
26.1.0
SDK
26.1.0
File Size
277.5 KB
UUID
22394B01-EE10-37F2-B01D-1E2B3DAC66C5
Analyzed
2026-04-09T09:59:12Z
CDHash
bdae74d4efb5f98d8e61b3268a6ed86dd74cc5c962ed8c59e0b76b98fe00da47

Capabilities

NetworkRaw packet capture library
/usr/lib/libpcap.A.dylib

Interesting Strings

Network Surface

DNA Capability Vector

Location
0
Keychain
0
Network
1
Storage
0
Hardware
0
IPC
0
Analytics
0
Security
0
System
0

Behavioral Profile

URL Endpoints
4
Telemetry Strings
0
File Paths
5
Bundle IDs
6
IOKit Constants
0
Library Functions
0

Structural HashesSHA-256

Static Libraries0 / 176 functions identified

Functions(176)

0x1000010c8sub_1000010c8
0x1000010f8sub_1000010f8
0x10000129csub_10000129c
0x1000018e4sub_1000018e4
0x10000193csub_10000193c
0x1000019acsub_1000019ac
0x1000019bcsub_1000019bc
0x1000019c8sub_1000019c8
0x100001a40sub_100001a40
0x100001cbcsub_100001cbc
0x100001ed8sub_100001ed8
0x100001eecsub_100001eec
0x100001f08sub_100001f08
0x1000021dcsub_1000021dc
0x100002438sub_100002438
0x10000272csub_10000272c
0x100002a80sub_100002a80
0x100002b30sub_100002b30
0x100002bf8sub_100002bf8
0x100002cc0sub_100002cc0

Imports230 symbols from 10 dylibs

Exports1

_mh_execute_header0x0