Category: Wireshark tutorials

The article introduces updated Wireshark filter rules for version 1.12, detailing capture and display filters, protocol, value comparison, and expression combination filtering.

This article uses Wireshark for TCP packet analysis of an HTTPS request, highlighting anomalies like retransmissions and connection resets.

HTTPS uses TLS/SSL with the RSA algorithm to secure web traffic by encrypting data, preventing eavesdropping. RSA is key in asymmetric encryption.

An IP Datagram, a TCP/IP protocol packet, consists of a header with critical info (like version, IP addresses) and data. TTL changes indicate…

Using Wireshark, analyze DNS traffic, based on UDP protocol, at Port 53 for domain resolution. DNS requests and responses detail UDP’s simplicity.

The content offers a detailed guide on network analysis with Wireshark, focusing on TRACERT analysis and various protocols like ICMP, DNS, and HTTP.

The TCP protocol’s communication and termination processes are analyzed using Wireshark. TCP’s connection termination involves a four-way handshake.

Wireshark helps trace the ARP protocol, a TCP/IP protocol resolving IP to physical addresses. It demonstrates ARP requests/responses in a network.

Use Wireshark statistics to query packet sizes via Statistics -> Group Length and HTTP request/response counts via Statistics -> HTTP -> Group Counter.

Using Wireshark to explore TCP: setting up a TCP server/client. Analyzes TCP behavior without server, during handshake, crashes, and keep-alive probe packets.