Hello everyone in this section. I will talk about the
basics of Wireshark.
You will see how to download and install deviceshack. First
of all, let's talk about what Wireshark
is.
Why shark is a free and open source packet
analyzer. It is used for Network travel
string analysis software and
Communications protocol development and education Wireshark
is cross platform meaning
it is available for various operating systems,
including Windows Macos Linux and
more.
Why shark is a powerful tool that allows
you to capture and analyze packets in
real time or offline from a variety
of sources including wired and
wireless networks USB devices and
more. It can be used to examine a
variety of protocols including tcp/ip
HTTP FTP
and many others.
One of the key features of Wireshark is its ability
to display packets in a human readable
format making it easy to understand
the data being transmitted.
It also provides a range of
powerful filtering options allowing you
to focus on specific packets or patterns of Interest.
In addition to its packet capture and Analysis skills
file shark also includes a
range of tools for generating and manipulating
packets as well as tools for protocol
detectors and statistics.
Why shark is widely used in the networking industry
and is a valuable tool for anyone
working with networks. Whether you
are a network administrator or network engineer
or developer. It is
also a popular choice for educational purposes as
it allows users to learn about how networks
and protocols work in a Hands-On way
why shark uses a graphical user
interface that allows users to interact with
the tool using menus buttons and
other graphical using interface elements. It
also includes a common lining interface CLI.
For advanced users who prefer to
use comments rather than a graphical user interface
Wireshark supports a wide range
of capture and display filters that can be
used to focus on specific packets or patterns of
Interest. These filters can
be applied in real time or after capture
has been completed.
Wireshark includes a range of features for analyzing
packets including support for
this acting and displaying the
contents of packets as well as tools for
generating and manipulating packets.
Why sharp is also extensible meaning that users
can write and use custom
detectors to analyze and display specific
protocols or types of data. This
can be useful for analyzing treatable protocols
or custom data formats Wireshark
is constantly being updated
and improved by a community of
developers and users.
Now, let's download and install Wireshark.
To download Wireshark. We are visiting the
Wireshark website.
And here is we will click on
the download button.
This will take you to the download page where
you can choose the version of Wireshark that
you want to download.
And I am using the Windows
operating system. So I will choose
the windows installer and windows
installer, which is 64 bit.
That is suitable for my operating system and you
can choose the suitable one
available one for you and it will download
for me the installer package.
Now I have the Wireshark installation file as
you see here and I will
go to it.
Once the download is complete you can double
click on the installation file to start the installation
process.
So here is the pain of installation.
and in this pane in this window choose the
next
for first and click to the noted button.
Next and we will say again.
Then we will check the Wireshark desktop
icon to make a shortcut.
on the desktop
and again, we will say next.
and against next
and we can choose to install npcap. What
is mpk?
And pcap is a packet captured library
for Windows that provides a low-level interface
for capturing Network traffic. It
is used by Wireshark a popular Network
protocol analyzer tool to capture
Network packets and display them for analysis.
And you can check the destroys.
And then we will say again next.
so install USB
USB pickup again, we can
check this
and then we will click the install.
And it is installing now.
And in somewhere of installation process it
will ask you to accept license agreement
and you can you can
choose I agree. Of course.
install mpcap in vmpcap API
compatible mode
you can choose.
The check button you can choose the install.
And Now mpcap setup is going
on.
And it is completed now we can say next.
and finish
and as you see our main installation is
moving on.
It will ask you again usbp cap.
And we will accept to this one
next and accept again
license agreement next.
and then we can
say next and install.
And it's completed.
We can close.
Again, our main installation is moving on.
Installation step has completed now. We
will say next.
and
it will be required to reboot now.
And I will reboot my machine and I
we will continue again.
Once the installation is completed and after the
rebooting operation, we can
launch Wireshark and by clicking
on the Wireshark icon on your
desktop or in the start menu.
Then you launch the wireshack for the first time you
are going to see the interfaces which are located in
your network under the capture header here.
You can see this.
So you will need to select the network interface that
you want to use to capture packets.
To do this in the easiest way you can make double
click on the interface.
So I am choosing the Wi-Fi interface since
the active font is Wi-Fi on my
network now and I want to
capture the packets on this interface.
after starting to capture
You can see the number of packets.
At the bottom, right? This is our status bar.
And as you see the packet number is
increasing continuously.
So whenever you want to stop the capturing
process.
You can press the stop button.
In here over there.
And when you click the stop.
Now the capturing process has stopped.
And we have now 20 packets on
our data file.
Another way to start capturing is using
to capture menu.
And to capture manual we click on the options.
after Choosing My interface Wi-Fi
I'm clicking on the start.
and we are saying continue without saving
the last file that before
we
captured
and again
It is starting to capturing the packets on my
Wi-Fi interface.
As you see there.
and in the status bar, the packets are
going to
move on.
And it's increasing again.
Now it's enough for us again. We can stop
this capturing process.
and
it has stopped again.
Now we have some data in our file
in addition to capturing process. You
can save this data file as a capture file.
So go to file menu.
and
click to the save
option
then give a name to this file.
And you can save this file with many format specifying
the file extension.
As you see in here.
There are many other extension for
the pcap file.
and
why should saves the capture files with pcapng
extension as default?
So you can change you can change the
extension whatever you want, but I will
say with the pickup and
G extension for now.
And I will click to save.
Now we save the capturing file.
In this video we have talked about the
washer and we have downloaded
and installed to buy shark. We
have captured some some Network packets on
our Network. So see you
on the next video.