performing-network-traffic-analysis-with-tshark

name	performing-network-traffic-analysis-with-tshark
description	Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious flows such as port scans and beaconing, extract IOCs (IPs, domains, URLs), and identify DNS tunneling patterns from PCAP files. Use when scripted or repeatable analysis of packet captures is needed rather than interactive inspection.
domain	cybersecurity
subdomain	network-security
tags	["tshark","pyshark","pcap","packet-analysis","network-forensics","wireshark","traffic-analysis"]
version	1.0
author	mahipal
license