Network packets are captured in raw binary form, and passed through the wiretap library and capture engine, and then to the core engine, with its dissector plugins and filters. The translated data is then displayed in packet frames through Graphical Toolkit (GTK).
How to do packet analysis
Get Wireshark 2 Quick Start Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
