pcap analysis

A practical, Bash-first guide to AI-powered PCAP triage: safely capture and rotate traffic, extract flow features with tshark/Zeek, train a lightweight Isolation Forest, and continuously score new captures to flag scans, beacons, and exfil—even with encrypted payloads. Includes install steps, ready-to-run scripts, cron automation, tuning tips, and integration with Suricata/Zeek for contextual alerts.