How To Use Wireshark At Home

Select one or more of networks go to the menu bar then select capture.

How to use wireshark at home. Determine the ip address of the default gateway on your pc. Particularly if you are using linux wireshark must be available directly from your distribution s repositories for an easier install at your convenience. That s where wireshark s filters come in. Wireshark shows you three different panes for inspecting packet data. When you click on a packet the other two panes change to show you the details about the selected packet.

In the display filter window at the top of the screen by highlighting a packet or a portion of a packet and right clicking on the packet. The packet list the top pane is a list of all the packets in the capture. In part 2 you will use wireshark to capture local and remote ethernet frames. How to use wireshark on windows if you want to install wireshark on your windows machine look for the appropriate version to download. Make sure you have selected the windows version of the.

The start button is in the look of the fin of a shark in blue color on the top left side of this tool. To begin capturing packets with wireshark. For example type dns and you ll see only dns packets. In the wireshark tool you will have to select the network you want to capture. Most people use wireshark to detect problems in their network and troubleshoot based on that but developers for instance can use it to debug programs.

The most basic way to apply a filter is by typing it into the filter box at the top of the window and clicking apply or pressing enter. Network security engineers can examine security issues qa engineers verify network applications and the plain old tech savvy person can use wireshark to learn network protocol internals. In the wireshark capture interfaces window select start. You will then examine the information that is contained in the frame header fields. Open a windows command prompt.

To select multiple networks hold the shift key as you make your selection. Use wireshark to capture and analyze ethernet frames. When you start typing wireshark will help you autocomplete your filter. You can also tell if the packet is part of a conversation.