Wireshark usage Basics

Wireshark official:

Http://www.wireshark.org/

I saw an old tutorial on the Internet. But it's very thorough... Of course, we can also read English directly on the official website... haha

Http://openmaniak.com/cn/wireshark_filters.php

This tutorial is very simple .. Install software --- start software --- Select a device --- capture the package ..

Because a lot of information is captured ....

Of course, you can also set some filters when capturing packets... You can also select the corresponding protocol according to the structure of the Internet Protocol system...

Several simple concepts:

Device: On my PC, it corresponds to your own NIC (in the software, use interface as the name... If you are confused, it means you do not understand the underlying layer yet ..)

The icon for viewing the device list is:

The main interface is also very conspicuous: "interface list"... please check it out... "En0" is the active network card .. Sometimes we may also enable wireless NICs...

Select an active device from the device list... Then, you can start

The captured data is as follows:

The above content is the log... You can also save the output...

To filter logs, enter the filter conditions in the filter column .... Check the log title...

In the title, you can enter IP. src = IP. DEST = In the Source and Destination expressions.

The basic usage is here.

/***

I am working on upper-layer application development now, so the data returned by Dasha is most suitable for "what is in hypertext, that is, what is at the application layer"

(Including the HTTP request header information and my upstream data ...). Pay attention to the blue line. [show the Blue Line next to the red line below.