← All tools

Wireshark

Packet Analyzer · Beginner

Capture and inspect network packets to understand protocols and investigate traffic.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Capture vs display filters
  • Follow TCP/HTTP streams
  • Protocol hierarchy statistics
  • Exporting objects

Legitimate use

Used by network engineers and SOC analysts daily for troubleshooting and investigations.

Official docs →

Example commands (lab VMs only)

  • wireshark -i lo
    Capture on the loopback interface
  • ip.addr == 127.0.0.1
    Display filter: localhost only
  • dns || http
    Display filter: DNS or HTTP