See a packet in its context
Kontextmenü, Follow auswählen
Show only ICMP packets from a host
tcpdump host 10.11.1.128 and icmp -i tun0
Show other systems communicating outside the own address
ip.addr == 10.11.1.0/24 && !(ip.addr == 192.168.119.0/24) && ! dns && !browser && !ssdp && !nbns && !llmnr
Record audio
Wireshark can transform captured audio streams. See telephony in the task thing.
Analysing output with LLMs
- Store a dump in t pcap(ng) file
- Transform it into json:
tshark ‑r cap.pcapng ‑T json > f.json - Add it into a model.
Leave a Reply
You must be logged in to post a comment.