diff --git a/config/assets/suricata.yaml b/config/assets/suricata.yaml
index 32736ee..63b6042 100644
--- a/config/assets/suricata.yaml
+++ b/config/assets/suricata.yaml
@@ -97,7 +97,7 @@ outputs:
       enabled: yes
       filename: log.pcap
       limit: 1gb
-      max-files: 20
+      max-files: 200
 
   - stats:
       enabled: yes
diff --git a/home/modules/networking.nix b/home/modules/networking.nix
index 884db28..58b2b72 100644
--- a/home/modules/networking.nix
+++ b/home/modules/networking.nix
@@ -5,6 +5,7 @@
     dig
     iftop
     iperf
+    tshark
     tcpdump
     ethtool
     traceroute