Wireshark can capture many packets in a very short time. To do this, go to the File menu and go to Save As option.īut that’s not all, the Wireshark wiki contains samples captures that you can use for learning. You can save the capture of the interface and see it later. If as in my case, after capturing the packets from the network, there is nothing interesting or simply do not want to analyze anything. In addition to TCP and UDP with light colors. Generally, black is reserved for failed or incomplete packets. In this window, you will see how the protocols are identified. Of course, each of them has a representation that can be modified to your liking.įor color rules, go to View menu and select Coloring Rules option. These represent the various protocols that are supported by Wireshark. Colors in WiresharkĪs you’ve noticed, the packages are shaded with different colors.

This way you will have the captured packets and you will be able to work with them. When you want to stop the traffic monitoring on the network interface, you can press that button. This will work when you stop scanning over the network interface by pressing the red button. To activate the Promiscuous Mode, go to Capture menu, Options. This is useful especially when the interface is wireless. If you activate the promiscuous mode you will not only be able to see the packets that go to your network interface, but also to the rest of the network. The capture is done in real time, so the information that will be presented to you is very changeable. So, click on the name of the network interface that you want to analyze and the capture of the traffic of that network will be incited. If you want to know what the other interfaces are called you can use this command. In my case, the network interface is wlp5s0, which refers to the wireless network I’m using. The first thing you need to do is select the network interface you want to inspect. First, run it from the main menu and you will see the following. Wireshark supports many protocols, but most are obsolete and few are used, so most packets are TCP, UPD, and ICMP.

Wireshark wifi analyzer