Hello everyone in this lesson. We are going to talk about
the Wireshark features and advantages here
are some features and advantages of
Wireshark.
First of all, the Wireshark allows you
to see what's happening on your network at a
microscopic level.
Why shark is a free and open source Network packed analyzer.
It is used to capture the sect
and display packets transmitted over
a network while shark allows you to investigate the
contents or packets and analyze their
details, which can be helpful for
tasks such as Network terrible shooting
protocol development and security analysis.
And pressure can capture live traffic from
a variety of interfaces including ethernet
Wi-Fi and many more
and can also analyze previously capture
traffic stored in a file. This allows
you to analyze traffic in real time or offline depending
on your needs.
Why shall also provides Advanced filtering and
display options allowing you to filter and display
packets based on various criteria such
as IP address protocol and
port number you can also customize the
way packets are displayed and arrange them
in different columns. This can help you focus
on the packets that are most relevant to
your analysis in addition to its packet analysis
capabilities. Why shark also support
some decryption protocols such as
SSL or TLS and other encrypted
traffic if you have necessary decryption keys.
This can be useful for analyzing encrypted
traffic and understanding the
contents of encrypted packets.
Why shark has a user front the graphical user interface
that allows you to easily navigate through capture
traffic and view packet details.
The interface includes features such
as a packet list a packet details Pane
and a packet by Spain which allow you
to feel different aspects of captured packets.
Why shark is available for Windows Macos Linux
and other platforms making it
a very slight tool.
It can be used on a wide range of
systems. It is widely used in
the networking industry for tasks such as Network
troubleshitting protocol development and security
analysis.
One of the main features of Wireshark is its wide range
of supported protocols. It can detect
and display packets for hundreds of
different networking protocols including internet
IP version for
IP version 6 TCP UDP
and many more. This makes
it a verse style tool that can
be used to analyze traffic on a variety of Networks.
And other feature is the ability to export
packets in various formats.
And Wireshark allows you to export packets in
formats such as pcap CSV and
plain text.
Which can be helpful for storing and sharing captured
terrific.
Wireshark also includes a number of
analysis tools that can be used to further analyze capture
traffic. For example, it includes
a sequence diagram generator that can help
you visualize the flow packets the flow
of packets between different devices on the network.
It also includes tools for analyzing packet
loss bandwidth utilization and other
performance metrics another useful
feature of Wireshark is its ability
to decode and display packets in
a human readable format by default packets
are displayed in a hexadecimal format,
but why shark can decode and display
them in a more readable format such as
as key or utf-8. This can
be helpful for understanding the contents of
packets and data they contain
File Shard is also extensible meaning that
it can be customized and extended with
additional features and functionality.
It includes support for custom detectors and
plugins which can be used to add support
for new protocols and features. There is
also an active community of developers and
users who contribute to the development of
Wireshark and share tips and tricks
and customizations.
So that's all for now. We will
talk about the different capture techniques in the
next lesson. See you on the next video.