Wireshark is a protocol analyzer that can capture traffic and then present it in a human readable format.
In this section, you will gain an insight into overall functionality of Wireshark and we will see how
to troubleshoot network traffic monitor for security issues and debug applications.
We will also cover how you can and where you can find a list of shortcuts so you can confidently and
quickly capture and analyze packets.
So that you can better appreciate the work that goes into Wireshark.
We will also review a list of many authors that contribute to this project and help make Wireshark an
exceptional tool.
We will also see where you can find links on the interface that provide helpful information on how to
better use Wireshark.
In order to better understand the packet analysis process, we will briefly review each of the phase
involved.
These are.
Gather the decode display and analyze.
We will then review the built in command line interface tools that complement a wireshark's basic functionality.
We will then finish with a closer look at Tshark, a lightweight command line interface application
which you can use when you need to capture traffic without a resource intensive overhead of using Wireshark.
In this section, you will learn about examining the Wireshark interface.
Understanding the phases of packet analysis and learning how to use the Wireshark command line interface
tools.