packet-capture Archives

Networking tutorial - IT technology blog

Python Network Traffic Analysis with PyShark: Automated Anomaly Detection and Reporting

July 19, 2026

PyShark lets you capture and analyze network packets programmatically in Python — aggregating connection counts, detecting anomalies, and generating traffic reports automatically. This tutorial walks through building a real traffic analyzer, from live capture to post-incident pcap analysis, that replaces manual Wireshark filtering during production incidents.

Security

Deploying Arkime on Linux: Full Packet Capture for Security Incident Investigation

June 30, 2026

Arkime (formerly Moloch) is the tool that turns a 4-day forensic investigation into a 4-hour one — it stores every packet with searchable metadata so you can reconstruct exactly what happened during a security incident. This guide walks through choosing between full packet capture approaches, the tradeoffs involved, and a complete Arkime deployment on Linux with OpenSearch backend.

Networking

Deep pcap Analysis with tshark on Linux: Filter Protocols, Extract Fields, and Generate Traffic Statistics

June 19, 2026

tshark puts Wireshark's full dissection engine on the command line — the right tool for analyzing pcap files on remote servers or inside CI pipelines. This guide covers protocol filtering with display filters, extracting named fields into tab-separated output, and generating traffic statistics without opening a GUI.

Networking

tcpdump: Network Packet Analysis from the Linux Command Line

April 2, 2026

tcpdump is the go-to command-line tool for capturing and analyzing network packets on Linux — no GUI, no overhead, just raw visibility into what's actually flowing through your interfaces. This guide walks through practical capture commands, BPF filters, and real production debugging scenarios to help you troubleshoot network issues fast.