wireshark_search_content
Search network packet captures for specific data patterns using string, hex, or regex matching to identify relevant traffic in pcap files.
Instructions
[Search] Find packets containing specific data.
Args: match_pattern: Pattern to search for search_type: Search method - 'string', 'hex', 'regex' limit: Maximum matches to return
Returns: Matching packets or JSON error
Errors: FileNotFound: pcap_file does not exist
Example: wireshark_search_content("traffic.pcap", "password", search_type="string")
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes | ||
| match_pattern | Yes | ||
| search_type | No | string | |
| limit | No |