Buzz
Wireshark's main function is to provide users with detailed information about network protocols, collect packets, and read and write various data formats. This software is also used to troubleshoot network issues, supporting multiple operating systems such as Windows, MacOS, Linux, Ubuntu, etc. Once you are familiar with Wireshark, you can analyze data packets in the network system easily.
GUIDE TO USING WIRESHARK TO ANALYZE DATA PACKETS IN THE NETWORK SYSTEM
I. Capturing Packets
Step 1: Download and install Wireshark – Monitor, analyze network protocols here: Download Wireshark
Step 2: After installation, launch Wireshark. On the main interface of the tool, pay attention to 2 options
Local Area Connection: Manage network system data via cable
Wireless Network Connection : Manage wireless network system data (Wi-Fi)
Choose the option that suits your network system, then click Start
Step 3: Wireshark has captured all data packets for each connected IP address through the network system. The information will be continuously updated whenever a device uses the network.
Step 4: To stop the process, click on the red square (Stop) on the toolbar.
Step 5: Each color displayed corresponds to a different status such as:
Green color : Traffic TCP
Light sky blue color : Traffic UDP
Slightly purple color : Traffic DNS
Orange text on black : TCP packets encountering issues
II. Filtering Packets
To monitor TCP Streams, right-click on the packet you want to track and select Follow TCP Stream
In the Follow TCP Stream table, you can choose various data display formats like ASCII, EBCDIC, Hex Dump, C Arrays, Raw for convenient data analysis
III. Inspecting Packets
You can also directly check specific information of the packets by clicking on the data packet you want to view. The exchanged data will be displayed in the frame below
To directly create a Filter from a packet, right-click on the packet containing the chosen Filter , hover over Apply as Filter, and select Selected
Wireshark is truly an effective tool for network administrators. The tool still has many other features, such as troubleshooting network execution, checking the security of the network system, examining network protocols, etc.
In addition to network data checking and network protocol analysis using Wireshark, readers can also explore ways to check network speed and control whether the network transmission system of their enterprise or home is stable or not.
