Is it possible to extract files from a capture file?

Yes, the skill provides commands to automatically export objects transferred over HTTP and SMB protocols directly from a PCAPNG file.

How does this help with encrypted traffic?

The skill provides workflows for analyzing TLS handshakes, identifying weak cipher suites, and extracting certificates, though full payload decryption requires external session keys.

Can I use this skill with command-line environments?

Absolutely. This skill includes extensive tshark commands designed specifically for headless capture and automated CLI-based analysis.

Does this skill require root or sudo privileges?

Yes, live packet capture requires root/sudo privileges or membership in the 'wireshark' group to access physical network interfaces.

Can it help identify DNS tunneling?

Yes, it includes specific workflows for detecting encoded subdomains and unusual query volumes that indicate DNS-based data exfiltration.

Network Traffic Analysis with Wireshark

Name: Network Traffic Analysis with Wireshark
Author: mukul975

bymukul975

•

4,121

•

安全与测试

Analyzes network packet data using Wireshark and tshark to identify security threats, diagnose protocol issues, and support incident response.

This skill enables Claude to perform comprehensive network traffic analysis and deep packet inspection using industry-standard tools like Wireshark and tshark. It provides structured guidance for configuring capture environments, applying complex display filters to isolate malicious patterns, and extracting forensic artifacts such as credentials or transferred files. Whether investigating data exfiltration via DNS tunneling or troubleshooting TCP performance bottlenecks, this skill offers the specialized commands and workflows needed to transform raw PCAP data into actionable security intelligence.

主要功能

01Statistical reporting for protocol hierarchy and endpoint discovery

02Protocol-specific deep analysis for TLS, DNS, HTTP, and SMB

034,121 GitHub stars

04Advanced display filtering for C2, lateral movement, and beaconing detection

05Live packet capture configuration with ring buffer support

06Automated artifact extraction including files and TLS certificates

使用场景

01Investigating suspected data exfiltration and command-and-control traffic

02Extracting forensic evidence and IOCs from captured network sessions

03Troubleshooting complex network performance issues and protocol failures

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills analyzing-network-traffic-with-wireshark

For use in Claude.ai and ChatGPT

主要功能

01Statistical reporting for protocol hierarchy and endpoint discovery

02Protocol-specific deep analysis for TLS, DNS, HTTP, and SMB

034,121 GitHub stars

04Advanced display filtering for C2, lateral movement, and beaconing detection

05Live packet capture configuration with ring buffer support

06Automated artifact extraction including files and TLS certificates

使用场景

01Investigating suspected data exfiltration and command-and-control traffic

02Extracting forensic evidence and IOCs from captured network sessions

03Troubleshooting complex network performance issues and protocol failures

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add mukul975/anthropic-cybersecurity-skills analyzing-network-traffic-with-wireshark

For use in Claude.ai and ChatGPT