How to analyze a wireshark capture