Daqscribe — The Ethernet Recorder Company

MDP™ — Metadata Parser

Index Once. Analyze Smarter.

Turn massive packet recordings into searchable metadata and an AI/ML-ready data foundation.

Scan → Parse → Index → Correlate
  1. Scan
  2. Parse
  3. Index
  4. Correlate

MDP scans recorded capture files, reads packet attributes and configured metadata fields, associates metadata with packet and file locations, and connects indexed information with timestamps, sessions, runs, and available event context. Animation is illustrative.

  • Enormous Volumes of Network Data

    High-speed recording preserves enormous volumes of network data.

  • Location-Aware Metadata Indexes

    MDP™ transforms recorded packets into structured, location-aware metadata indexes, making large datasets easier to access and analyze throughout the nStudio™ ecosystem.

  • Searchable Metadata Foundation

    The result: a searchable metadata foundation for downstream navigation, retrieval, and analysis.

Finding a Needle in a Haystack

A single capture can contain millions of packets. Across thousands of files and long-duration recordings, locating one packet or event of interest can feel like finding a needle in a haystack.

MDP changes that. It builds an index of packet locations, timestamps, and selected metadata so applications can target relevant data without repeatedly scanning complete recordings.

Index once. Access intelligently.

From Raw Packets to Searchable Intelligence

MDP works behind the scenes to turn captured network data into a structured index while leaving the original packet recording intact.

Scan → Parse → Index → Correlate

  • Scan

    Identify recorded capture files across configured storage.

  • Parse

    Read packet attributes and configured metadata fields.

  • Index

    Associate metadata with packet and file locations in the original recording.

  • Correlate

    Connect indexed information with timestamps, sessions, runs, and available event context.

The result: a searchable metadata foundation for downstream navigation, retrieval, and analysis.

From Recording Session to Packet

MDP connects large, multi-file recording sessions to indexed packet information. This diagram illustrates the relationship between capture files, packet descriptors, and the searchable index.

Scroll horizontally to view the full diagram.

From recording session to packetA recording session on storage contains multiple PCAP or NTCAP files. Inside one file: a file header of 24 bytes for PCAP or 128 bytes for NTCAP, then a repeating sequence of a 16-byte packet descriptor — timestamp, packet length and file offset — followed by the Ethernet frame it describes. Inside one frame: a Layer 2 header carrying source and destination MAC and EtherType, a Layer 3 header carrying source and destination IP and protocol, a Layer 4 header carrying source and destination port and flags, and the payload of user-specified application data. MDP extracts these fields from each packet and builds a searchable index.RecordingsessionContains multiplePCAP / NTCAP files.PCAPNTCAPPCAPNTCAPPCAPNTCAPINSIDE A PCAP / NTCAP FILEFile headerPCAP: 24 bytes · NTCAP: 128 bytesPacket descriptor16 bytesEthernet framePacket 1Packet descriptor16 bytesEthernet framePacket 2Packet descriptor16 bytesEthernet framePacket NA PCAP / NTCAP file contains a sequence ofpacket descriptors and Ethernet frames.PACKET DESCRIPTORTimestampPacket length (size in bytes)File offset / locationETHERNET FRAME (PACKET DATA)Layer 2 header (MAC)Source / destination MAC, EtherType, etc.Layer 3 header (IP)Source / destination IP, Protocol, etc.Layer 4 header (TCP / UDP / ICMP, etc.)Source / destination port, Flags, etc.Payload (User data)Application data (User specified)Searchable indexMDP extracts key fields from each packetand builds a searchable index.

This is for demonstration purposes only.

Built for Scale. Ready for Intelligence.

MDP is designed for large capture files, multi-file recording sessions, and high-capacity storage environments where repeatedly reading raw packet data is impractical.

  • Packet-Level Precision

    Associate indexed attributes with locations in the original recordings.

  • Large-Scale Processing

    Support extensive recording datasets and sequential or batch indexing.

  • Faster Data Access

    Reduce repeated full-file scans during downstream discovery and analysis.

  • AI/ML-Ready Metadata Foundation

    Organize packet information for targeted retrieval and downstream AI/ML preparation; labeling and training-data preparation remain separate steps.

MDP-Generated Packet Index

The example below shows how packet positions and selected fields can be represented in an MDP index. Actual supported fields depend on the recorder, file format, and MDP configuration.

Scroll horizontally within diagrams and tables to see all details.

Five sample packet index entries. Colored columns connect to their explanations below.
Packet_NumberTimestampPacket_Descriptor_OffsetPayload_OffsetUSF1USF2USFNN = field numberProtocolSource_IP
125EB965BFDBDD7080D2E401000111E9EC0744
225EB965BFDBDD784A8FAE502000211EAEC0744
325EB965BFDBDD818D022E601000311EBEC0744
425EB965BFDBDD89CF84AE703000411EC7C0744
525EB965BFDBDD9211201172E802000511EDEC0744

Packet Index

Sequential packet number (hex).

Packet Address

File offset of the packet descriptor (hex).

From USF1 to USFN

User-specified data fields extracted from the payload. Additional user fields can be added on.

Protocol

Protocol identifier; 0x11 = UDP in this example.

Source IP

Source IP address, shown in hexadecimal.

This is for demonstration purposes only.

From Indexed Data to Intelligent Discovery

MDP provides the metadata foundation for nDiscovery™ packet navigation and for potential integration with the planned standalone nQuery™ LLM/RAG application. The vision is to let users ask natural-language questions about recorded data and retrieve relevant results through an indexed retrieval layer, rather than have an LLM process entire raw recordings.

nQuery is under development. Its LLM/RAG-based, natural-language exploration and any integration with MDP indexes must not be described as shipping MDP functionality.

Technical Highlights

CapabilityDescription
Primary functionPacket metadata extraction and location-aware indexing
InputRecorded PCAP and supported packet capture files
MetadataPacket location, timestamp, protocol and configured fields
Processing modesSequential during scanning; batch after scanning
Data scopeLarge capture files, sessions and recording collections
OutputMetadata and index files for downstream nStudio applications
DeploymentOptional module for supported Daqscribe platforms

Capture. Preserve. Analyze. Reuse.

MDP strengthens the Analyze stage of nStudio by making preserved recordings accessible through packet-level indexing. nStudio connects high-speed capture, persistent storage, intelligent analysis, and data reuse.

Explore nStudio | Discover nDiscovery

Index Once. Analyze Smarter.

Turn massive recordings into structured, accessible metadata supporting analytics and downstream AI/ML data preparation.

The suite

Integration with nStudio.

nStudio™ Software Ecosystem: Capture. Preserve. Analyze. Reuse.

nRec™
High-speed Layer 2 Ethernet capture and recording
nPlay™
Timing-preserving Ethernet replay with original or user-defined playback speed
pFilter™
Inline packet filtering, classification, channelization, and optional slicing
nRemote™
External command, status, and operational automation
nXplorer™
Developer-oriented monitoring, generation, capture, and replay utilities
MDP™
Packet metadata intelligence and indexing for large recorded datasets
nDiscovery™
Recording discovery, navigation, management, and analytics preparation
Ordering

Ordering information.

nStudio Software Suite
Integrated software environment supporting recording, discovery, management, analysis, and replay workflows.
Evaluation & integration
Contact Daqscribe to confirm platform compatibility, licensing, and deployment requirements.
Support & maintenance
Software updates, technical support, and maintenance options are available by quotation.
Request a Quote

Build the nStudio Environment That Fits Your Mission

Choose the capabilities your team needs today and extend the same Daqscribe ecosystem as your needs for replay, intelligent data discovery, remote automation, and AI-ready data preparation evolve.Capture. Preserve. Analyze. Reuse. Channelize traffic at the source, find the data that matters, and expand toward AI-assisted exploration.

Not a pricing question? Contact us for general inquiries, or reach the support portal if you already own the hardware.

Which products are you interested in?
What data problem are you trying to solve?

Quantities, deployment dates, and contract vehicles help us quote accurately.

We'll only use these details to prepare your quote.

Global Headquarters

10 Inverness Dr E Suite 125Englewood, CO 80112