Tool comparison · Documentation

This comparison focuses on publicly documented behavior for TraceWrangler and VoIP Analyzer Tool, plus the current open-source anoncap CLI and PacketSafari managed / DeepAnon workflow.

Hover or focus a status icon for the supporting detail. The top rows compare shared anonymization mechanics, default slicing behavior, audit artifacts, and public protocol handling; the Pro: rows at the bottom call out private PacketSafari / DeepAnon coverage that is not part of the open-source default CLI profile.

PacketSafari-specific notes

default mode is deep
a postprocess payload cleanup pass can run after the structured rewrite pass
map files are first-class outputs
--batch-coherent is the recommended standalone mode for dumpcap ring buffers, filesets, and multi-point captures that need consistent replacements across separate anonymized outputs
validation and leak verification are built into the workflow

Capability matrix
Payload reduction modes
anoncap reference