Packet Buddy - Chatting with your PCAPs, via the Cloud or Locally on Your Own Machine! - AIHUB-2000#

Dave Zacks (Cisco), Prapanch Ramamoorthy (Cisco)

• Why: LLM-assisted packet analysis is a genuinely new tool category, and the PM lives in PCAPs — this is the kind of thing worth knowing exists before it lands in a commercial product.
• What: An open-source solution ("PACKET BUDDY") that lets you chat with your own Wireshark captures via a choice of LLMs — asking what traffic is present, what errors it sees, and getting help understanding packets and flows — deployable via cloud or locally on your own machine (from abstract only).
• How: PCAP ingestion fed to an LLM with conversational querying; the local deployment option is the privacy-relevant detail.
• Where applicable: Any environment; open source, with the obvious caveat that feeding captures to cloud LLMs has data-exposure implications — the local mode matters.