How to use Wireshark

Learn Wireshark Part-1 

In this series of post, we gonna see the basics of Wireshark, how to capture the packets and apply the filters and get some knowledge about wire shark

On the First thing, we figure out one common question arises on every beginner to the Wireshark

What is Wireshark? 

According to Wikipedia Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education,
Well, In One word Its is used to Network packets Analyzer

How to Install the Wireshark in your system:

Wireshark doesn't require any hardware requirements to work around with packets analyzing

If your using Windows Operating system, the installation process is just as typically Next, Next,

or if you're using Linux Operating system
Open your Terminal, Run that apt command  >>> sudo apt install wireshark

while the installation process you get the message like Nonroot users can capture the packets? Set No for the security reason

After the  Installation launch your Wireshark by typing sudo wireshark in terminal
You get a window like this

Capture the packets:

Now you are ready to capture the packets, before that you need to choose which network layer you want to intercept the packets, for example wired(Ethernet), Wireless (Wifi) Wireshark even supports network layers such as Bluetooth, loopback...

Select your Interface and start capturing it by double-clicking that interface or click the shark icon on the top left corner

SampleCaptures:

If you are a beginner to networking,  instead of captured and analyze your own traffic, use some sample captures files from Sample Captures - Wireshark wiki  I will teach the Basic filtering methods in rest of that series so that same sample captured files makes easy to follow 

How to add:

Wireshark captured files are mostly end up with .pcap extension, It clearly indicated that's packets captured files 

To add that file in your Wireshark:

1. Open your Wireshark 
2. on the top left, you can see the menu called the 'file' 
3. select that, inside that select open option
4. now locate your downloaded (.pcap) file and open it
5. Done it will import in youWireshark

How to Apply filters in Wireshark Link will be updated soon  

If you want to learn more about Wireshark check out the amazing course from Pluralsight
 Getting Started with Analyzing Network Traffic Using Wireshark  by Ross Bagurdes  Sign-up now with 50% offer

Thank you for reading...