wireshark_check_threats
Analyze Wireshark packet captures to detect malicious IPs by checking against URLhaus threat intelligence from abuse.ch.
Instructions
[Security] Check captured IPs against URLhaus threat intelligence. Downloads and caches threat feed from abuse.ch.
Returns: Threat analysis summary or JSON error
Errors: FileNotFound: pcap_file does not exist DependencyError: Failed to extract IPs NetworkError: Failed to download threat feed
Example: wireshark_check_threats("suspicious.pcap")
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes |