- Download the
PCAPNGfile. - Analyse it using
Wireshark. - After following
TCPStream we shall find that the last line seems to be like a flag intcp.stream eq 5
cvpbPGS{c33xno00_1_f33_h_qrnqorrs}
- Its ROT13 Encrypted.
- So decoding it will give the flag.
Flag --> picoCTF{p33kab00_1_s33_u_deadbeef}


