CS 135602 : Introduction to Information Engineering

Wireshark

Introduction

• What is Wireshark?

– Wireshark is a network packet analyzer.

• Examples people use Wireshark for:

– troubleshoot network problems

– examine security problems

– debug protocol implementations

– learn network protocol

2

Download Wireshark

• Get Wireshark

– http://www.wireshark.org/download.html

3

Getting Started

4

Capture Device

5

Result

6

Packet received or transmitted history

Packet information

Example - HTTP

7

The Internet software layers

8

1. HTTP

2. TCP

3. IP

4. Ethernet

4 3 2 1

9

Detail of HTTP Packet Information (1/2)

10

Source & Destination IP

MAC Address

Detail of HTTP Packet Information (2/2)

11

Sequence number for TCP

Information about HTTP

Example - MSN

12

Set the filter to “msnms” for MSN

MSNMS for Application layer

13

My IP address