Wireshark: Difference between revisions

From SecurityTools
(Added Malware Traffic Analysis site to →‎More Information: section)
m (Add affiliate link to Amazon book information)
Line 11: Line 11:


* [https://www.wireshark.org/docs/ Official Wireshark documentation] website
* [https://www.wireshark.org/docs/ Official Wireshark documentation] website
*Laura Chappell's [https://www.amazon.com/Wireshark-101-Essential-Analysis-Solution/dp/1893939758/ Wireshark 101: Essential Skills for Network Analysis - Second Edition] book
*Laura Chappell's [https://www.amazon.com/Wireshark-101-Essential-Analysis-Solution/dp/1893939758/?tag=securitytoo08-20 Wireshark 101: Essential Skills for Network Analysis - Second Edition] book
*[https://unit42.paloaltonetworks.com/wireshark-workshop-videos/ Unit 42 Wireshark workshop] video tutorials collection
*[https://unit42.paloaltonetworks.com/wireshark-workshop-videos/ Unit 42 Wireshark workshop] video tutorials collection
* Lifewire [https://www.lifewire.com/wireshark-tutorial-4143298 Wireshark tutorial]
* Lifewire [https://www.lifewire.com/wireshark-tutorial-4143298 Wireshark tutorial]

Revision as of 21:25, 8 November 2021

Description

Wireshark is a free and open-source network protocol analyzer that works on all major operating systems. Wireshark was originally named Ethereal, but changed its name in 2006 due to trademark issues. The tool can be downloaded from the official site, and copious documentation and tutorials are also available there.

For full functionality, Wireshark needs to be run in promiscuous mode. This requires root or administrator privileges, depending on the operating system. It can be run with normal user privileges, but this limits the tool to only sniffing packets to and from the host machine.

Tool Type

More Information

Similar tools