diff --git a/forensics/pcappoisoning/flag.txt b/forensics/pcappoisoning/flag.txt
new file mode 100644
index 0000000..7755843
--- /dev/null
+++ b/forensics/pcappoisoning/flag.txt
@@ -0,0 +1,4 @@
+# While looking at the byte display and going through all the packets,
+# this suddenly appeared in packet 507
+
+picoCTF{P64P_4N4L7S1S_SU55355FUL_31010c46}
\ No newline at end of file
diff --git a/forensics/pcappoisoning/trace.pcap b/forensics/pcappoisoning/trace.pcap
new file mode 100644
index 0000000..f9815a5
Binary files /dev/null and b/forensics/pcappoisoning/trace.pcap differ