diff --git a/k8s.nix b/k8s.nix
index 6b5ba3d..5ec01f1 100644
--- a/k8s.nix
+++ b/k8s.nix
@@ -134,6 +134,7 @@ let
       firewall.allowedTCPPortRanges = [ { from = 5000; to = 50000; } ];
       firewall.allowedTCPPorts = [ 80 443 ];
     };
+    environment.systemPackages = [ pkgs.tshark ];
   };
 
   minion = host: ip: { config, lib, pkgs, ... }: