Packet sniffing and analysis using Wireshark
In the previous chapter, we discussed how to install Wireshark on our computers.
Let's take a quick look at the Wireshark interface:
As we can see, the interface is quite intuitive. Once a few basic decisions, as outlined in the previous chapter (such as the selection of interface to capture from) have been made, the capture operation is initiated.
Once the capture operation begins, the interface looks similar to the following screenshot:
Packet List pane
Each row in the preceding screenshot represents a packet captured by Wireshark.
When one of the rows/packets is highlighted and right-clicked, we can see the TCP stream for the in-depth detail about its contents, as shown in the following screenshot:
Another cool thing that you can get Wireshark to do is to resolve the IP addresses to real-world human-readable domains using Address Resolution, as shown in the following screenshot:
The Wireshark main window is broadly divided into three distinct...
