Shadow

Tag: Wireshark

Wireshark – For those who choose to do more with less

Wireshark – For those who choose to do more with less

Software
The philosophy of doing more with less sounds good, but it is not always practical. It takes effort and lots of practice to get to this methodology. I used to carry a “multi-tool” with me. It was like having a mini toolkit I could fold it up and carry in my pocket. It was great, but over time I started to think it was a little heavy and opted to leave it in my actual tool bag and went back to carrying a small Swiss Army knife. It was smaller and lighter. I learned to get the most out of it and found that I didn't miss the larger, heavier multi-tool as much as I originally thought. In fact, I learned a few tricks over the years that I probably would not have discovered if I hadn’t forced myself to do more with less. This is the philosophy I try to adhere to for troubleshooting communica
Wireshark Filters: Display vs Capture

Wireshark Filters: Display vs Capture

Software
A common thought by beginners when it comes to Wireshark filters is that display and capture filters do the same thing. Well, they don't; they may seem to be doing the same thing to you but the difference is when the packets get filtered. Display filters don't stop Wireshark from capturing any packets, you still capture all packets but it only displays you the packets you asked for. While capture filters when used make it so Wireshark won't capture any packets that you have specified not to.
Wireshark Basic Overview

Wireshark Basic Overview

Software
What is Wireshark? Wireshark is open-source software for Windows and UNIX/Linux, open-source meaning that anyone can download it for free and can alter the source code however they please if they want to. It's considered the best network packet analyzer you can use today. But, What is a network packet analyzer? A network packet analyzer captures network packets on a specified network and displays very detailed data about the network protocols of each packet. Typical users are: Network administrators - who can use it to troubleshoot network issues Cyber Security Engineers - Can watch and see any attempted attacks on a network Developers - to Debug protocols For more information check out https://www.wireshark.org/ Check out our post on display filters and capture filters