IoTNet

IoT protocol detection analyzes PCAP files or live traffic captures to automatically identify IoT-specific protocols including MQTT, CoAP, Zigbee, Z-Wave, and ONVIF. The skill parses network packets and flags protocol signatures, enabling rapid identification of which IoT protocols are active on your network.

Yes, PCAP analysis identifies security vulnerabilities including unencrypted traffic, plaintext credentials, and insecure protocol versions in IoT device communications. This allows you to spot sensitive data transmitted without encryption and assess authentication weaknesses in real or captured traffic.

Live capture on network interfaces like eth0 allows real-time traffic analysis with configurable filtering by IP or Berkeley Packet Filter rules. Results output in text, JSON, or quiet formats with optional verbose detail, providing immediate visibility into active IoT device communications and security posture.

The skill automates protocol detection and vulnerability flagging, so you don't need to manually parse packets. Configurable detection rules and formatted output (JSON, text) deliver actionable insights—like identifying plaintext credentials or insecure protocol versions—without requiring low-level packet interpretation skills.

Encrypted communications cannot be decoded for content inspection, so vulnerability detection focuses on unencrypted traffic, protocol metadata, and connection patterns. You can identify which devices use encryption but not validate the strength or detect encrypted payload anomalies without decryption keys.