live_capture
Capture live network traffic from an interface with optional filters and duration limits for immediate analysis.
Instructions
Capture live network traffic from an interface. Writes to a temporary pcap that is deleted after the preview is returned.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| interface | Yes | Network interface name (e.g., eth0, Wi-Fi) | |
| duration | No | Capture duration in seconds (default: 10, max: 300) | |
| packet_count | No | Maximum number of packets to capture (optional) | |
| display_filter | No | Wireshark display filter to apply (optional) |