Header-only parsing
The tool walks the file's per-packet records - each carrying a captured length and an original length - and decodes just enough of the Ethernet/IP/TCP/UDP headers to identify protocol, source and destination addresses, and ports. Bytes past the transport header are not interpreted, so contents of HTTP requests, TLS records, or other application data are never extracted or displayed.