FlowTag visualizes pcap files for forensic analysis