Wireshark is a network analysis tool that enables the inspection and analysis of network traffic. It operates by capturing and dissecting network packets that traverse the computer network. Wireshark can save and display the content and metadata of the packets, which helps in understanding the behavior of network traffic and detecting potential issues or security threats.

You can inspect individual packets, analyze their protocol data, view message timing, and determine how different systems communicate with each other over the network. It supports multiple network protocols such as Ethernet, Wi-Fi, TCP/IP, DNS, HTTP, and many others.

![](sanity:image-2806d615f16fddb7f70d8b1a08ec9d54619316b9-928x588-png)


What is wireshark?

Wireshark is a tool used to capture and analyze data traffic. The tool is suitable for learning different network protocols and you often need it in CTF competitions as well.

Wireshark is a tool used for capturing and analyzing network traffic. It enables the examination and analysis of network traffic in real-time or from saved PCAP files.

Wireshark is able to dissect various network protocols and display detailed information about each network packet. Security experts can use it to detect suspicious or malicious network traffic, such as the spread of malware, attacks, or phishing. It is often needed in CTF competitions as well.

Especially Wireshark is suitable for learning network protocols. You can, for example, start Wireshark, open a browser, go to Hakatemian's page, and then see the whole transaction in Wireshark.

In this course, we will learn the basics of Wireshark, such as capturing traffic, using the search field, and understanding the statistics in the Wireshark program.

Computer Networks

Installation

Intro

The first steps

Taking traffic to and from the machine

What is wireshark?

Learn to hack — start here