Ghosts_in_the_Bulb

SR

We pulled a few hours of network traffic from a suspected insider's home while their smart home gadgets talked to a hub on the local network. At a glance nothing looks out of place. We think something was moved off the machine over the LAN before the owner could get it out of the building. All you get is the capture and a short device list from the router.

You are given capture.pcap and topology.md. The flag is in isfcr{...} format.