Use the wireshark-traffic-analysis project skill in this repository to investigate a packet capture with a professional, evidence-backed workflow.
Inputs:
- Capture path:
${input:capture_path:Path to the pcap or pcapng file} - Goal:
${input:goal:triage | security | incident-response | troubleshoot} - Optional scope:
${input:scope:Suspicious host, protocol, time window, domain, stream, or symptom}
Requirements:
- Start broad, then narrow.
- Use the project skill playbook that matches the goal.
- Include exact filters, streams, frames, or extracted fields for every important finding.
- Label confidence as
confirmed,likely,possible, orunresolved. - End with concrete next steps.
Relevant files: