Wireshark Tool, Installation Steps and Capturing packets in Wireshark Tool

         
            Author of wireshark tool = Gerald Combs.

            Developers = Wireshark team.

            Initial Release = 1998

            Originally named Etheral, the project was renamed wireshark in May, 2006 due to trademark             issues.

            Written in = C, C++

           

            Wireshark is the network packet analyzer. A network packet analyzer will try to capture network packets and tries to display that packet data as detailed as possible. You could think of a network packet analyzer as measuring device for examining what's happening inside a network cable, just like an electrician uses a volunteer for examining what's happening inside an electric cable (but at a higher level of course).

            In past, such tools were expensive, properetary or both. But how wireshark has changed all of this, it is free, open source and the best packet analyzer available today.

Download wireshark from - https://www.wireshark.org/download.html

           

            Purposes of using wireshark :

1.      Network administrator use it to troubleshoot network problem.

2.      Network security engineers use it examine security problems.

3.      Developer use it to debug protocol implementations.

4.      Peoples use it to learn network protocol internals.

5.      QA engineers use it to verify network applications.

           

            Features of Wireshark :

1.      Data can be captured “from the wire” from a line network connection or read from a file of already captured packets.

2.      Live data can be read from the different types of networks.

3.      Captured data can be browsed via a GUI (open packets).

4.      Captured files can be programmatically edited.

5.      Wireshark can color packets based on rules that match particular fields in packets, to help user to identify the types of traffic at a glance. A default set of rules is provided users can exchange existing rules for  coloring packets, add new rules or remove rules.

6.      Display packets with very detailed protocol information.

7.      Export same or all packets in a number of capture file formats.

            GUI of Wireshark :
For Example : 

           

           

No.	Time	Source IP	Destination IP	Protocol used	Length	Information
1	23:12:00	192.168.02.6	192.125.45.50	TCP	66	//
2	13:00:00	192.168.26.59	192.129.35.60	HTTP	253	//
3	15:45:54	192.168.20.142	192.102.24.98	DNS	74	//

            What wireshark does not provide :

                        Wireshark isn't an intrusion detection system it will not warn you when someone does strange things on your network that he/she isn't allowed to do. However, if strange things happen, wireshark might help you figure out what is really going on.

Installation steps for wireshark tool=  
Go to https://www.wireshark.org/download.html

for downloading wireshark.

Choose the Proper Version according to your system.

Here I have chosen 64-bit Windows Installer and downloaded the .exe file.

Double click the .exe file, in my case the file name is - Wireshark-win64-3.0.2.exe

After that this window will appear ->

 After clicking next this window will appear Choose license agreement ->

 Choose Components it will be selected by default just click next ->

Just Include additional Tasks, such as creating desktop icons ->

Choose Installation path, it will select by default, if you want you can change it but my suggestion is to keep default path as it is.

Packet Capture it will get ticked automatically so just click on to next button ->

Tick mark here if you want USB capture.(I have not ticked because I don't want it.)

After that Just click install Wireshark Tool Will be installed = 

Click next, in the next step it will ask you to Reboot your system now or manually. Installation of Wireshark Tool is Successful.

GUI of wireshark - 

Capturing Packets in Wireshark Tool - 

That's it for now, from my side. If you any problem regarding installation or anything, let me know in the comment section.