From b79fea918d48c1fbeab6cb103b13ae4d8b0178ea Mon Sep 17 00:00:00 2001 From: YueGuobin Date: Tue, 12 May 2026 14:54:50 +0800 Subject: [PATCH] fix: hint LLM about -c behavior when tshark returns empty with -c --- .../agent/gns3_copilot/tools_v2/packet_analysis_tool.py | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/gns3server/agent/gns3_copilot/tools_v2/packet_analysis_tool.py b/gns3server/agent/gns3_copilot/tools_v2/packet_analysis_tool.py index 6a1a079c7..10a31e326 100644 --- a/gns3server/agent/gns3_copilot/tools_v2/packet_analysis_tool.py +++ b/gns3server/agent/gns3_copilot/tools_v2/packet_analysis_tool.py @@ -447,6 +447,13 @@ class PacketAnalysisTool(BaseTool): logger.warning(f"tshark stderr: {result.stderr}") if not output.strip(): + if "-c" in tshark_args: + return json.dumps({ + "error": "No matching packets found", + "hint": "The -c flag limits total packets READ, not matched results. " + "Try removing -c so tshark scans the entire capture file. " + 'Use pipe to "head -N" to limit output instead.', + }) return "No matching packets found" logger.info(f"tshark output: {len(output)} characters")