Introducing Wireshark
Jessey Bullock · 2017
This introductory chapter first discusses what Wireshark is used for and when to use it. The second part introduces the popular graphic user interface (GUI). The chapter breaks down the different areas of the interface, how they relate to one another, and the reasoning for needing each one. It also discusses how and when each part of the interface helps the user maximize his use of Wireshark. The third part of this chapter discusses the way Wireshark filters data presented on the interface. This remains the focus on for the rest of the chapter. The last part is about different types of fi lters and how users can customize these filters. Wireshark first captures the data from a network interface and then breaks the capture into the frames, segments, and packets, understanding where they begin and end. Users can analyze the captures immediately or save them to load later and share with others.