Capturing packets will be the backbone of your network monitoring activity through Wireshark. $ tar -xf wireshark-2.4.2.tar.xz -C /tmp How to Capture PacketsĬapturing packets is the bread and butter of using Wireshark. You can then extract it by entering this command: For instance on Ubuntu you can download Wireshark by entering the following command: For Linux and Ubuntu machines, you can install Wireshark from the source. You can download Wireshark for Windows and Mac OS. Wireshark can be downloaded for free from the official website. Downloading Wiresharkīefore looking at how you can use Wireshark to capture and inspect packets you first need to download it.

In this article we’re going to outline how you can use Wireshark to capture and inspect packets. In short it offers you a way to troubleshoot your network for flaws and to make sure that an unauthorized user or program isn’t active on your network. It can help to indicate devices that are malfunctioning or using too much data. This format is referred to as human readable, and tells you the nature of a device or applications network usage. Wireshark works by pulling packets from your network traffic and displaying them in a format that you can understand. The reason it has become so widely-used is because deep packet inspection tells you a lot of information about the nature of your network traffic.

This small program has become one of the core tools used by network administrators the world over. Wireshark is one of the most commonly-used deep packet inspection tools in the world.

How to enter promiscuous mode wireshark