Learning Network Forensics

Packet sniffing and analysis using Wireshark

In the previous chapter, we discussed how to install Wireshark on our computers.

Let's take a quick look at the Wireshark interface:

As we can see, the interface is quite intuitive. Once a few basic decisions, as outlined in the previous chapter (such as the selection of interface to capture from) have been made, the capture operation is initiated.

Once the capture operation begins, the interface looks similar to the following screenshot:

Packet List pane

Each row in the preceding screenshot represents a packet ...