analyze_pcap_file
Analyze network packet captures from PCAP files using display filters to troubleshoot issues or extract traffic patterns.
Instructions
Analyze a PCAP file with optional display filters.
Args: filepath: Path to PCAP/PCAPNG file display_filter: Wireshark display filter (e.g., 'http', 'ip.addr == 10.0.0.1') max_packets: Maximum number of packets to analyze
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| filepath | Yes | ||
| display_filter | No | ||
| max_packets | No |