How to use Wireshark, analyze data packets in the network, capture network data packets

If you are a system administrator you. You will not be unaware of the Wireshark tool, a leading tool in network packet analysis. Simple, intuitive interface, accurate reporting make Wireshark extremely popular today. This article will guide you to use Wireshark to analyze data packets in the network.

The main function of Wireshark is to provide users with detailed information about network protocols, packet collection, and the ability to read and write many different types of data. This software is also used to troubleshoot network problems, support on many different operating systems such as Windows, MacOS, Linux, Ubuntu, etc. Once you are familiar with Wireshark, you can analyze data packets in network system one way easy.

WIRESHARK GUIDE TO ANALYZE DATA PACKAGE IN NETWORK SYSTEM

I. Capturing Packets

Step 1: Download and install Wireshark – Monitor and analyze network protocols here: Download Wireshark

Step 2: Once the installation is done, launch Wireshark. At the main interface of the tool, pay attention to 2 options
Local Area Connection : Manage network data via cable

Wireless Network Connection : Wireless network data management (Wi-Fi)

Please select the appropriate option for the network system you are using then select Start

Step 3: Wireshark captured all data packets on each IP address connected through the network. Information will be continuously updated every time a device uses the network.

Step 4: To stop the process, click on the red square (Stop) on the toolbar.

Step 5: With each color displayed differently corresponding to each different state such as:

Green : Traffic TCP

Light blue : Traffic UDP

Slightly purple color : Traffic DNS

Black with orange letters : TCP packet has problem

You can also save the data pack for later analysis by selecting File -> Save (Ctrl + S) or Save as… (Ctrl + Shift + S)

II. Filtering Packets

At Filter Enter the information to filter then select Apply or press Enter on the keyboard. For example, to filter protocol packets TCP We type tcp into the Filter box and then press Enter, the filter will only show us the TCP protocols that are running on the screen.

You can also create Filter new by selecting menu Analyze -> Display filters

To follow the TCP Streamright-click on the package to be tracked and select Follow TCP Stream

At the table Follow TCP Streamyou can choose the data display format ASCII, EBCDIC, Hex Dump, C Arrays, Raw to facilitate data analysis

III.Inspecting Packets

You can also directly check any part of the Package information by clicking on the data package you want to view. Exchange data will be displayed in the box below

To directly create Filter from package, right click on the package containing the type Filter selected, point to Apply as Filter choose Selected

Wireshark is really an effective tool for network administrators. The tool still has a lot of other features such as debugging network execution, checking network security, checking network protocols, etc.

https://thuthuat.Emergenceingames.com/phan-tich-goi-du-lieu-trong-he-thong-mang-bang-wireshark-12860n.aspx
In addition to the problems of checking network data and network protocols with Wireshark, readers can refer to more ways to check network speed and control whether your business or home’s network connection is stable or not. .