# Recorded packet capture inspection

> Select TShark fields, display filters and decode-as rules over an existing network, USB or Bluetooth capture, and look up installed field names. It does not capture traffic, open an interface or control a device.

- Type: Documentation
- Targets: Protocol
- Category: Official REA: investigation guides
- Relationship: Official REA documentation
- Sources reviewed: 2026-10-17
- Added to the catalog: 2026-10-17
- Original resource: <https://github.com/morluto/rea/blob/main/docs/packet-captures.md>
- Primary source: <https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/packet-captures.md>
- Catalog page: <https://awesomerea.org/resources/rea-packet-captures/>
- Record JSON: <https://awesomerea.org/resources/rea-packet-captures/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/rea-packet-captures/index.md)

## Requirements & limits

- Caller-supplied TShark 4.x on Linux with util-linux prlimit; macOS and Windows hosts are refused before inspection. Listed in the rea-agents 6.5.0 release notes.
- Dissector output describes the selected recording, not verified device behavior. Upstream fixtures are generated Ethernet/UDP/DNS and Bluetooth HCI PCAPs and do not cover PCAPNG, USB, BLE ATT or physical capture.

## Primary sources

1. <https://github.com/morluto/rea/blob/808339f0b1cf3837445f392b5d5f1f362d64a27d/docs/packet-captures.md>
2. <https://github.com/morluto/rea/blob/3b79af28e80785afce9f5998d8f03289402a1847/CHANGELOG.md>

## More in References and learning

- [Packet capture summaries](https://awesomerea.org/resources/rea-pcap-summaries/index.md) · Documentation
- [Recorded signal decoding](https://awesomerea.org/resources/rea-signal-recordings/index.md) · Documentation
- [Browser observation guide](https://awesomerea.org/resources/rea-browser-guide/index.md) · Documentation
- [JavaScript and Electron: follow a CSV export](https://awesomerea.org/resources/rea-electron-guide/index.md) · Documentation
- [rea-playbook](https://awesomerea.org/resources/rea-playbook/index.md) · Learning resource
- [rea-lab](https://awesomerea.org/resources/rea-lab/index.md) · Research

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.