What problem does it solve?
Embedded developers and testers often need to discover interfaces, capture packet traces, and analyze pcap files to diagnose connectivity, protocol, or interoperability issues, but that work is manual, error-prone, and interrupts development loops. This skill centralizes interface discovery, live capture, offline pcap analysis, connectivity checks, port scanning, and traffic statistics so AI or tooling can perform network debugging reliably.
Core Features & Use Cases
- Interface discovery: list OS interfaces and map them to tshark capture indices for accurate capture selection.
- Live capture: run timed captures with BPF/display filters and save in pcap/pcapng formats, with optional JSON Lines streaming.
- Offline analysis: produce protocol distributions, conversations, endpoints, IO stats, and anomaly detection using tshark and capinfos.
- Connectivity & scanning: ICMP/TCP ping, traceroute, concurrent port scanning with optional banner grabs for embedded targets.
- Traffic statistics: timed IO/stat aggregation and protocol/endpoint summaries for validation and regression checks.
- Use case: capture 30s of traffic from a device under test, analyze protocols and anomalies, then run a port scan against the device to identify exposed embedded services.
Quick Start
Capture 30 seconds of traffic on the target interface, save as trace.pcapng, and analyze protocols and anomalies in JSON output.