Wireshark
Packet Analyzer · Beginner
Capture and inspect network packets to understand protocols and investigate traffic.
Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.
What to learn
- Capture vs display filters
- Follow TCP/HTTP streams
- Protocol hierarchy statistics
- Exporting objects
Legitimate use
Used by network engineers and SOC analysts daily for troubleshooting and investigations.
Official docs →Example commands (lab VMs only)
- wireshark -i loCapture on the loopback interface
- ip.addr == 127.0.0.1Display filter: localhost only
- dns || httpDisplay filter: DNS or HTTP