Automate network traffic analysis using tshark (Wireshark CLI) and pyshark to compute protocol distribution statistics, detect suspicious flows such as port scans and beaconing, extract IOCs (IPs, domains, URLs), and identify DNS tunneling patterns from PCAP files. Use when scripted or repeatable analysis of packet captures is needed rather than interactive inspection.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-tsharknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-tshark -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-network-traffic-analysis-with-tshark -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-network-traffic-analysis-with-tsharkgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-network-traffic-analysis-with-tsharkgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-network-traffic-analysis-with-tshark ~/.claude/skills/performing-network-traffic-analysis-with-tshark # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-network-traffic-analysis-with-tshark ~/.agents/skills/performing-network-traffic-analysis-with-tshark # Codex, Cursor, Gemini CLI, Copilot, OpenCode