Does this skill work with existing PCAP files?

Yes, it includes detailed procedures for both live traffic capture and offline analysis of existing PCAP and PCAPNG files, including stream reconstruction.

Can I use this skill to analyze encrypted traffic?

While the skill provides TLS/SSL filtering, viewing the actual encrypted content requires providing the appropriate server keys or session secrets within the Wireshark environment.

Is root access required to use this skill?

Root or administrator privileges are necessary only when performing live packet captures on a physical network interface; they are not required for analyzing existing capture files.

What protocols can I analyze with this skill?

The skill supports a wide array of protocols including TCP, UDP, HTTP, DNS, TLS, SMB, and ICMP, providing specific filter syntax for each.

How does this skill help with security investigations?

It provides specialized filters and workflows to detect port scans, ARP spoofing, and suspicious command-and-control (C2) traffic patterns within your network.

Wireshark Network Traffic Analysis

Name: Wireshark Network Traffic Analysis
Author: claudiodearaujo

byclaudiodearaujo

•

安全与测试

Analyzes network traffic using Wireshark to troubleshoot connectivity, optimize performance, and investigate security incidents.

This skill equips Claude with deep packet inspection capabilities and network protocol analysis workflows. It provides comprehensive guidance on capturing live traffic, applying advanced display filters for IP and protocol identification, and reconstructing TCP/UDP streams to examine application-layer data. Whether you are debugging a slow web application, performing a security audit, or investigating malware beaconing, this skill offers the specific technical patterns needed to navigate Wireshark's powerful analysis engine effectively.

主要功能

01Protocol hierarchy and conversation statistical analysis

02Advanced display filtering for protocols, TCP flags, and payload content

031 GitHub stars

04Reconstruction of TCP, UDP, and HTTP communication streams

05Live packet capture controls and capture filter configuration

06Security-focused detection for port scanning and ARP spoofing

使用场景

01Monitoring protocol performance and optimizing data transfer

02Conducting forensic investigations into suspicious network traffic

03Troubleshooting complex network connectivity and latency issues

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro wireshark-analysis

For use in Claude.ai and ChatGPT

Download Skill