< Back

 

Packet Capture : Wireshark

 

Lecture PDF Download Ʒ ȭǥ: 1      Packet Samples : Ʒ ȭǥ: 1

 

Hands-on Practice

-     Wireshark

 

Packet analyzer

Packet Analyzer(also called packet sniffer, network analyzer) is a program that can intercept traffic from the network and log it. Captured traffic is not only yours, so this program can use to show the information of other persons. The analyzer is used not only to logging the traffic, but also decoding the packets data. It can be used for

-      Analyzing Network Traffic

-      Detecting Network intrusion

-      Monitoring network usage

-      Sniffing on other network users and collect information

-      Debugging the implementation of protocol

            

Packet Capture

Packet Capture is the process of intercepting and logging traffic.

 

Wireshark

The wireshark is well-known packet analyzer. Wireshark development thrives thanks to the contributions of networking experts across the globe. It is the continuation of a project that started in 1998. The below features are written at their web-site.

 

Features

- Deep inspection of hundreds of protocols, with more being added all the time

- Live capture and offline analysis

- Standard three-pane packet browser

- Multi-platform: Runs on Windows, Linux, OS X, Solaris, FreeBSD, NetBSD, and many others

- Captured network data can be browsed via a GUI, or via the TTY-mode TShark utility

- The most powerful display filters in the industry

- Rich VoIP analysis

- Live data can be read from Ethernet, IEEE 802.11, PPP/HDLC, ATM, Bluetooth, USB, Token Ring, Frame Relay, FDDI, and others (depending on your platform)

- Decryption support for many protocols, including IPsec, ISAKMP, Kerberos, SNMPv3, SSL/TLS, WEP, and WPA/WPA2

- Coloring rules can be applied to the packet list for quick, intuitive analysis

- Output can be exported to XML, PostScript, CSV, or plain text

 

 

 

References

Wikipedia, http://en.wikipedia.org/wiki/Packet_analyzer

Wireshark, http://www.wireshark.org/about.html