skills.rest
ryukyagamilight
ryukyagamilightCOMMUNITY
Explore all skills by this author →
GitHub

traffic-analysis

Capture and analyze network packets using tcpdump and tshark.

1|Updated Jan 31, 2026
Search Tags:#networking#network monitoring#packet capture#traffic analysis#wireshark#tcpdump
One-click install
npx skills add https://github.com/ryukyagamilight/terminal-skills --skill traffic-analysis-ryukyagamilight
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: traffic-analysis
Source: https://github.com/ryukyagamilight/terminal-skills/tree/main/network/traffic-analysis
Command: npx skills add https://github.com/ryukyagamilight/terminal-skills --skill traffic-analysis-ryukyagamilight

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides tools and techniques for analyzing network traffic, diagnosing network issues, and understanding data flow.

Core Features & Use Cases

  • Packet Capture: Utilize tcpdump to capture network packets based on various filters.
  • Traffic Analysis: Employ tshark (Wireshark CLI) for deep packet inspection and statistical analysis.
  • Real-time Monitoring: Use iftop and nethogs to monitor bandwidth usage by hosts and processes.
  • Use Case: Troubleshoot slow network performance by capturing and analyzing HTTP traffic to identify bottlenecks or analyze DNS queries to diagnose resolution problems.

Quick Start

Analyze network traffic on the 'eth0' interface using tcpdump and save the output to 'capture.pcap'.

Frequently Asked Questions about traffic-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I capture network packets on a specific interface using tcpdump?▼

To capture network packets, use tcpdump to specify the target interface like eth0, apply advanced filters, and save the output directly to a .pcap file for detailed inspection and statistical reporting.

Can I monitor real-time bandwidth usage by specific hosts and processes?▼

Yes, you can monitor real-time bandwidth usage by utilizing tools like iftop and nethogs to track network performance and identify which hosts or processes are consuming bandwidth.

What is the best way to analyze HTTP traffic to troubleshoot slow network performance?▼

Analyzing HTTP traffic is best done using tshark for deep packet inspection, allowing you to identify network bottlenecks, extract data, and generate statistical reports to diagnose slow performance.

How does deep packet inspection help with DNS resolution problems?▼

Deep packet inspection helps by capturing and analyzing DNS queries to diagnose resolution problems, enabling detailed review of network data to pinpoint exactly where traffic analysis fails.

Does this traffic analysis approach support UDP protocol inspection alongside TCP?▼

Yes, this traffic analysis approach supports comprehensive protocol inspection for both TCP and UDP, facilitating network troubleshooting and security auditing through detailed data extraction.

Related Skills

Explore More Software Engineering Skills→
ryukyagamilightryukyagamilight
1

network-tools

Diagnose Linux network issues with command-line tools for connectivity, ports, and traffic.

Community
Intermediate
YukiIto1999YukiIto1999

performing-network-traffic-analysis-with-tshark

Analyze PCAP files with tshark to extract protocol statistics, top talkers, DNS queries, HTTP URLs, and IOCs.

Community
Intermediate
chatermchaterm
50

traffic-analysis

Capture and analyze network packets using tcpdump, tshark, iftop, and nethogs.

Community
Intermediate
KaiserWhoLearnsKaiserWhoLearns

threat-detection

Detect port scans, DoS events, and beaconing using exact threshold rules.

Community
Advanced