O'Reilly logo

Penetration Testing Bootcamp by Jason Beltrame

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Wireshark

Wireshark is one of the most important tools you can utilize for looking at what is happening on the network. It allows you to look at every piece of information about this packet you could ever want to see. It starts at the physical layer and goes up from there. Wireshark was originally called Ethereal, but later changed to Wireshark.

Wireshark is very similar to tcpdump, but has a graphical interface tied around it and has some additional features, as follows:

  • Color coding packet types that can be changed and customized
  • Ability to look at new protocols with plugins
  • Voice over IP calls can be captured as well
  • Ability to click on packets and follow the stream

Here is a screenshot of Wireshark when it first starts up. You can enter ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required