packet-analysis

To analyze pcap files for network troubleshooting, you use this Skill to inspect packet captures, filter for retransmissions, and identify unusual protocol activity across endpoints. It requires the Packet Buddy MCP scripts to parse the data and deliver structured insights.

The best way to extract HTTP requests and DNS queries from a network capture is to apply protocol-specific inspection commands. This Skill directly supports extracting pcap_dns_queries and pcap_http_requests to isolate specific traffic for forensic analysis.

Yes, you can export packet capture data to JSON for downstream tooling. This Skill includes the pcap_to_json feature, allowing you to convert filtered network packets into JSON format for further processing in integrated dashboards or external systems.

To identify top conversations and protocol distribution in a pcap file, you generate a pcap summary and protocol hierarchy. This Skill uses Packet Buddy MCP to list endpoint conversations and break down protocol layers for performance monitoring.

Yes, you need Packet Buddy MCP scripts to perform packet analysis with this Skill. The scripts provide the core discovery, filtering, and inspection functions required to process live or replayed network captures across CLI or integrated dashboards.