How To Use Wireshark At Home

Use wireshark to capture and analyze ethernet frames.

How to use wireshark at home. Wireshark shows you three different panes for inspecting packet data. Most people use wireshark to detect problems in their network and troubleshoot based on that but developers for instance can use it to debug programs. In the display filter window at the top of the screen by highlighting a packet or a portion of a packet and right clicking on the packet. To begin capturing packets with wireshark. The start button is in the look of the fin of a shark in blue color on the top left side of this tool.

For example type dns and you ll see only dns packets. We are selecting eth0 because our network interface is an ethernet connection. Select one or more of networks go to the menu bar then select capture. Particularly if you are using linux wireshark must be available directly from your distribution s repositories for an easier install at your convenience. Now you will have to click on the start button.

How to use wireshark on windows if you want to install wireshark on your windows machine look for the appropriate version to download. The packet list the top pane is a list of all the packets in the capture. That s where wireshark s filters come in. How to filter and inspect packets in wireshark you can apply wireshark filters in two ways. To select multiple networks hold the shift key as you make your selection.

When you start typing wireshark will help you autocomplete your filter. You will then examine the information that is contained in the frame header fields. Make sure you have selected the windows version of the. Network security engineers can examine security issues qa engineers verify network applications and the plain old tech savvy person can use wireshark to learn network protocol internals. In the wireshark tool you will have to select the network you want to capture.

Open a windows command prompt. Determine the ip address of the default gateway on your pc. In part 2 you will use wireshark to capture local and remote ethernet frames. In the wireshark capture interfaces window select start.