Can this skill perform live network captures?

Yes, it provides detailed instructions for initiating live captures on specific network interfaces, including the necessary commands and privilege requirements for Windows, macOS, and Linux.

Does it help with encrypted traffic analysis?

It includes workflows for following TLS/SSL streams and identifying encrypted traffic patterns, though full decryption requires providing Wireshark with the appropriate session keys.

Is this skill suitable for detecting cyber attacks?

Yes, the skill contains specific logic for identifying common attack vectors such as ARP spoofing, port scanning, and suspicious DNS queries associated with malware.

What protocols does this skill support?

It supports a wide range of protocols including TCP, UDP, HTTP/S, DNS, FTP, SSH, SMB, and many others, providing specific filter syntax for each.

Wireshark Network Traffic Analysis

Name: Wireshark Network Traffic Analysis
Author: claudiodearaujo

byclaudiodearaujo

보안 및 테스팅

Performs deep packet inspection and network protocol analysis using Wireshark for security auditing, troubleshooting, and performance optimization.

소개

This skill provides a comprehensive framework for conducting professional-grade network traffic analysis within Claude Code. It guides users through the entire lifecycle of packet analysis, from setting up live captures and applying complex display filters to reconstructing TCP streams and performing security forensics. By providing specific syntax for protocol analysis and anomaly detection, it enables developers and security professionals to quickly identify network bottlenecks, investigate suspicious traffic patterns like ARP spoofing or malware beaconing, and debug application-layer communication issues.

주요 기능

Statistical analysis workflows for protocol hierarchy and network conversation mapping.
0 GitHub stars
Security-focused detection patterns for port scanning, ARP spoofing, and C2 traffic.
Advanced display filter library for IP, TCP, UDP, and application-layer protocols.
Automated Expert Information interpretation to identify network errors and retransmissions.
Step-by-step guidance for TCP/UDP stream reconstruction and data extraction.

사용 사례

Diagnosing network latency and application connectivity bottlenecks.
Debugging custom network protocols and API communication during development.
Performing forensic security investigations on suspicious PCAP files.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter wireshark-analysis

For use in Claude.ai and ChatGPT

Download Skill

GitHub

소개