# Wireshark Network Traffic Analysis

> This skill should be used when the user asks to "analyze network traffic with Wireshark", "capture packets for troubleshooting", "filter PCAP files", "follow TCP/UDP streams", "detect network anomalies", "investigate suspicious traffic", or "perform protocol analysis". It provides comprehensive techniques for network packet capture, filtering, and analysis using Wireshark.

- Skill: `dokhacgiakhoa/wireshark-network-traffic-analysis` (Agent Skill, multi-file: 24 files)
- Install (CLI): `npx skillmds@latest add dokhacgiakhoa/wireshark-network-traffic-analysis`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dokhacgiakhoa/wireshark-network-traffic-analysis/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: Dokhacgiakhoa (https://skillmd.com/u/dokhacgiakhoa)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/dokhacgiakhoa/wireshark-network-traffic-analysis

---


# Wireshark Network Traffic Analysis

## Purpose

Execute comprehensive network traffic analysis using Wireshark to capture, filter, and examine network packets for security investigations, performance optimization, and troubleshooting. This skill enables systematic analysis of network protocols, detection of anomalies, and reconstruction of network conversations from PCAP files.

## Inputs / Prerequisites

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [Required Tools](./sub-skills/required-tools.md)
### 2. [Technical Requirements](./sub-skills/technical-requirements.md)
### 3. [Use Cases](./sub-skills/use-cases.md)
### 4. [Primary Outputs](./sub-skills/primary-outputs.md)
### 5. [Phase 1: Capturing Network Traffic](./sub-skills/phase-1-capturing-network-traffic.md)
### 6. [Phase 2: Display Filters](./sub-skills/phase-2-display-filters.md)
### 7. [Phase 3: Following Streams](./sub-skills/phase-3-following-streams.md)
### 8. [Phase 4: Statistical Analysis](./sub-skills/phase-4-statistical-analysis.md)
### 9. [Phase 5: Security Analysis](./sub-skills/phase-5-security-analysis.md)
### 10. [Phase 6: Expert Information](./sub-skills/phase-6-expert-information.md)
### 11. [Keyboard Shortcuts](./sub-skills/keyboard-shortcuts.md)
### 12. [Common Filter Reference](./sub-skills/common-filter-reference.md)
### 13. [Export Options](./sub-skills/export-options.md)
### 14. [Operational Boundaries](./sub-skills/operational-boundaries.md)
### 15. [Technical Limitations](./sub-skills/technical-limitations.md)
### 16. [Best Practices](./sub-skills/best-practices.md)
### 17. [Example 1: HTTP Credential Analysis](./sub-skills/example-1-http-credential-analysis.md)
### 18. [Example 2: Malware C2 Detection](./sub-skills/example-2-malware-c2-detection.md)
### 19. [Example 3: Network Troubleshooting](./sub-skills/example-3-network-troubleshooting.md)
### 20. [No Packets Captured](./sub-skills/no-packets-captured.md)
### 21. [Filter Not Working](./sub-skills/filter-not-working.md)
### 22. [Performance Issues](./sub-skills/performance-issues.md)
### 23. [Cannot Decrypt TLS/SSL](./sub-skills/cannot-decrypt-tlsssl.md)