Experiment No 09
Experiment No 09
AIM: Wireshark
i. Packet Capture Using Wire shark
ii. Starting Wire shark
iii. Viewing Captured Traffic
iv. Analysis and Statistics & Filters Viewing CapturedTraffic
v. Analysis and Statistics & Filters.
Theory:
Wireshark-win64-3.4.3)
Wireshark is a network packet analyzer. A network packet analyzer presents captured packet
data in as much detail as possible.
You could think of a network packet analyzer as a measuring device for examining what’s
happening inside a network cable, just like an electrician uses a voltmeter for examining
what’s happening inside an electric cable (but at a higher level, of course).
Here are some reasons people use Wireshark:
Network administrators use it to troubleshoot network problems Network security engineers
use it to examine security problems QA engineers use it to verify network applications
Developers use it to debug protocol implementations
People use it to learn network protocol internals
i) Packet captures using click capture:
Click the red “Stop” button near the top left corner of the window when you want to stop
capturing traffic
ii) Starting wire shark
After downloading and installing Wireshark, you can launch it and double-click the name of
a network interface under Capture to start capturing packets on that inter face(wifi or
Ethernet or LAN)
You can also save your own captures in Wireshark and open them later. Click File > Save to
save your captured packets.
v) To find Statistics:
Goto to statistics and select Protocol(DHCP, UDP Multicast)