domains / families / security / pcap-triage-tshark

pcap-triage-tshark

separate

Fast workflow to inspect PCAPs and extract protocol-level details using tshark

When to use

• inspect PCAPs
• extract protocol-level details
• list HTTP traffic
• filter by method or host
• print useful HTTP fields
• follow a TCP stream
• export payload bytes
• summarize HTTP requests

Skill page

Source