We provide users with a Technical Exchange platform where we offer solutions to common issues encountered during daily product use. If you have additional questions, please reach out to us through the Contact Us section, and we will do our best to address any concerns.
Wireshark is a network packet analysis tool with powerful capabilities. It can capture various network packets and display detailed packet information. For security reasons, Wireshark can only view packets; it cannot modify packet contents or send packets.
The basic workflow is: select a network adapter -- capture network packets -- apply filters -- obtain and save the required packets -- analyze the packets.
Download link:https://www.wireshark.org/#download>
Start screen
Wireshark captures packets from a specific network adapter on the machine. When the machine has multiple adapters, you need to select one. The start screen allows you to select an adapter directly, or in
Click Start to begin capturing network packets.
Use the display filter to select the packets you need and save them.
Filters help us quickly find the packets we need among large volumes of network data. There are two types: capture filters, which only capture the required packets and filter out unwanted results. Capture filters can be configured in
The Packet List panel displays: number, timestamp, source address, destination address, protocol, length, and packet information. Different protocols are shown in different colors. Colors can be configured in <View — Color Rules> settings.
Packet Details: This section contains the most important information, allowing you to inspect every field in the protocol. Frame: Physical layer data frame overview Ethernet II: Data link layer Ethernet frame header information Internet Protocol Version 4: Internet layer IP packet header information Transmission Control Protocol: Transport layer segment header information, TCP in this case Hypertext Transfer Protocol: Application layer information, HTTP protocol in this case
