Wireshark

 Wireshark 

Wireshark is a tool that analyzes a network packet. It can be used to for network testing and troubleshooting. This tool helps you to check different traffic going through your computer system.

Wireshark is a network protocol analyzer, or an application that captures packets from a network connection, such as from your computer to your home office or the internet. Packet is the name given to a discrete unit of data in a typical Ethernet network. Wireshark is the most often-used packet sniffer in the world.

What are the four main uses of Wireshark?

Image result for wireshark description

Here are some reasons people use Wireshark:

.Network administrators use it to troubleshoot network problems.

.Network security engineers use it to examine security problems.

.QA engineers use it to verify network applications.

.Developers use it to debug protocol implementations.

Wireshark consists of a rich feature set including the following:

Live capture and offline analysis.

.Rich VoIP analysis.

.Read/write many different capture file formats.

.Capture compressed files (gzip) and decompress them on the fly.

.Deep inspection of hundreds of protocols.

.Standard three-pane packet browser.

Features:

.It provides rich VoIP (Voice over Internet Protocol) analysis.

.Capture files compressed with gzip can be decompressed easily.

.Output can be exported to XML (Extensible Markup Language), CSV (Comma Separated Values) file, or plain text.

.Live data can be read from the network, blue-tooth, ATM, USB, etc.

.Decryption support for numerous protocols that include IPsec (Internet Protocol Security), SSL (Secure Sockets Layer), and .WEP (Wired Equivalent Privacy).

.You can apply intuitive analysis, coloring rules to the packet.

.Allows you to read or write file in any format.

What are the advantages of Wireshark?

Image result

Advantages of using Wireshark:

Free software. Available for multiple platforms – Windows & UNIX. Can see detailed information about packets within a network. Not proprietary can be used on multiple vendors unlike Cisco Prime.

Why do hackers use Wireshark?

Wireshark is one of the most popular network analyzer tools available worldwide Whether you need to perform a security application analysis or troubleshoot something on a network. One of the most obvious applications of Wireshark is the ability to capture network traffic and look at it from the perspective of learning.