wireshark-network-traffic-analysis

name	Wireshark Network Traffic Analysis
description	This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". It provides comprehensive techniques for network packet capture, filtering, and analysis using Wireshark.
metadata	{"author":"zebbern","version":"4.1.0-fractal"}

Wireshark Network Traffic Analysis

Purpose

Execute comprehensive network traffic analysis using Wireshark to capture, filter, and examine network packets for security investigations, performance optimization, and troubleshooting. This skill enables systematic analysis of network protocols, detection of anomalies, and reconstruction of network conversations from PCAP files.

Inputs / Prerequisites

🧠 Knowledge Modules (Fractal Skills)

1. Required Tools

2. Technical Requirements

3. Use Cases

4. Primary Outputs

5. Phase 1: Capturing Network Traffic

6. Phase 2: Display Filters

7. Phase 3: Following Streams

8. Phase 4: Statistical Analysis

9. Phase 5: Security Analysis

10. Phase 6: Expert Information

11. Keyboard Shortcuts

12. Common Filter Reference

13. Export Options

14. Operational Boundaries

15. Technical Limitations

16. Best Practices

17. Example 1: HTTP Credential Analysis

18. Example 2: Malware C2 Detection

19. Example 3: Network Troubleshooting

20. No Packets Captured

21. Filter Not Working

22. Performance Issues

23. Cannot Decrypt TLS/SSL