wireshark: Add a test

Closes #27353.

Signed-off-by: Mike McQuaid <mike@mikemcquaid.com>