pcap-analyzerAnalyze local PCAP/PCAPNG files with tshark to generate detailed network forensics reports including talkers, ports, DNS, TLS, HTTP, and anomaly summaries.
Install via ClawdBot CLI:
clawdbot install marposins/pcap-analyzerGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://www.wireshark.org/docs/man-pages/tshark.htmlAudited Apr 17, 2026 · audit v1.0
Generated Mar 1, 2026
Security analysts use this skill to quickly assess a suspicious PCAP file after a network breach alert, identifying top talkers, anomalous traffic patterns like port scans or beaconing, and extracting indicators such as DNS queries and TLS fingerprints for further investigation.
Students or trainees in cybersecurity certification programs (e.g., CPENT) apply this skill to analyze provided PCAP files, learning to interpret network conversations, service usage, and anomaly detection in a controlled, educational environment without modifying original data.
IT auditors leverage this skill to examine network traffic captures from organizational systems, verifying compliance with policies by summarizing traffic patterns, identifying unauthorized services or ports, and flagging potential data exfiltration attempts in a read-only manner.
Malware researchers analyze PCAP files from sandboxed environments to understand command-and-control communications, extract DNS queries for domain blacklisting, and detect TLS fingerprints associated with malicious payloads, aiding in threat intelligence gathering.
Network engineers use this skill to diagnose issues in captured traffic, identifying retransmission bursts, excessive RSTs, or unusual port activity that may indicate configuration errors or hardware failures, focusing on specific hosts or time windows as needed.
Offer a basic version of this skill for free to individual users or small teams, with premium features like advanced anomaly detection or integration with SIEM systems available via subscription, generating revenue from enterprise customers seeking enhanced network forensics capabilities.
Cybersecurity consulting firms bundle this skill as part of their incident response or audit packages, using it to provide clients with quick, structured reports from PCAP analysis, thereby increasing service value and enabling upselling for deeper investigations.
Integrate this skill into online cybersecurity training platforms or virtual labs, where students pay for access to hands-on exercises involving PCAP analysis, driving revenue through course enrollments or platform licensing agreements with educational institutions.
💬 Integration Tip
Ensure tshark and required binaries are installed on the system; for optimal use, provide clear paths to PCAP files and consider setting focus_host to narrow analysis in large captures.
Scored Apr 19, 2026
Create a safe visible-diagnostic map for home Wi-Fi problems using device symptoms, router lights, placement notes, outage checks, speed tests, and support-r...
Network Tools: Network utilities: IP conversion/validation, subnet calculator, CIDR ranges, MAC formatting, port lookup, DNS resolution, private IP detection...
Printing Press CLI for Olx. OLX.pl job-listings reverse-engineered API (public, no auth)
技能太多不知道该用哪个,每次都要翻半天?本技能根据用户需求智能匹配最合适的已安装技能。关键词+语义双重匹配,输出Top3推荐+理由+适用场景,不再试错浪费时间。 触发词:选技能、用哪个技能、技能推荐、技能匹配、技能选择、该用什么、帮我选技能 排除:技能创建(用skill_builder)、技能搜索安装(用skil...
控制 Bambu P1S 拓竹3D打印机。支持文件管理(FTPS)、连接状态检查。可查看文件列表、上传下载gcode/3mf文件、查看延时摄影。
Design, provision, and connect cloud resources across servers, networks, and services.