# Pcap

> Network traffic analysis - C2 detection, exfiltration, lateral movement

- Skill: `majiayu000/pcap` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/pcap`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/pcap/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/pcap

---


# PCAP Analysis

Analyze network captures:
- Connection analysis
- C2 beaconing detection
- Data exfiltration identification
- DNS tunneling detection
- Lateral movement patterns
- Protocol anomalies
- Artifact extraction

## Required Context
1. **PCAP File**: Path to capture file
2. **Focus**: C2, exfil, lateral, general
3. **Time Range**: If filtering needed

## Tools Used
zeek, tshark, tcpdump, suricata, NetworkMiner

## Example
```
/pcap
File: /captures/suspicious.pcap
Focus: C2 beaconing, exfiltration
```