wireshark_quick_analysis
Analyze pcap files in one call: get file info, protocol distribution, top talkers, conversations, hostnames, and anomaly summary with suggested next steps.
Instructions
[Agent] One-call traffic overview and analysis.
Automatically gathers file info, protocol distribution, top talkers, conversations, hostnames, and anomalies into a single comprehensive report.
Phases: File info → Protocol distribution → Top talkers → Top conversations → Key hostnames (HTTP + DNS) → Anomaly summary (Expert Info)
Args: pcap_file: Path to capture file
Returns: Complete traffic analysis report with suggested next steps.
Example: wireshark_quick_analysis("capture.pcap")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| pcap_file | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |