To add a column for the destination port, right-click any of the present columns then select “Column Preferences”. Only several properties are displayed but this can be modified to display additional properties such as the destination port number, which is useful for identifying the remote service that your host was connecting to. Each packet displayed has some properties such as the source and destination IP addresses and protocol. To view the Time column in a human-readable format, select View > Time Display Format > Date and Time of Day. Customising the Displayīy default, Wireshark displays the time in seconds since the beginning of capture. To start the packet capturing process, click the Capture menu. To set a filter, click the Capture menu, choose Options, and click WireShark: Capture Filter will appear where you can set various filters. Lastly, the bottom part of the screen displays the Packet Bytes view, which contains the data portion of the selected packet where the hex representation of the packet data is on the left while on the right this is displayed in ASCII format. In this case, you can set a filter that excludes all packets except those associated with the IP address of the client you’re troubleshooting. Each section contains additional information which can be viewed by expanding the section. Below that is the Packet Details view which contains detailed information on each section of the packet. Next is the Packet List view which shows each packet that was sent and received during the capture.
Going downwards, there is a field for filtering and displaying specific packets based on certain conditions. The main toolbar at the top displays various buttons such as starting and stopping a capture, selecting another network interface to listen on, etc.
0 kommentar(er)
