« Previous 1 2 3 4 5
Wireshark
Conclusions
Wireshark is one of the most powerful packet sniffers and is comparable to commercial products. This article only looks at a fraction of the available functionality. The supported protocols, built-in filters, and analysis functions alone could fill volumes.
However, in-depth network analysis doesn’t become easier with the use of wizards and filters if you do not have the required protocol knowledge. Additionally, use of Wireshark is typically a manual process even though the toolbox keeps on growing as each new version of the software arrives. If you don’t have in-depth network knowledge and understand how the protocols and services interact, Wireshark will not be able to help you discover performance weaknesses or configuration errors.
The Author
Thomas Drilling has been a freelance journalist and editor for scientific and IT magazines for more than 10 years. With his editorial office team, he regularly writes on the subject of Open Source, Linux, servers, IT administration and Mac OS X. Thomas Drilling is also a book author and publisher, a consultant to small and medium-sized companies, and a regular speaker on Linux, Open Source, and IT security.
« Previous 1 2 3 4 5
Related content
- Wireshark 4.4 Released
-
Detecting and analyzing man-in-the-middle attacks
Wireshark and a combination of tools comprehensively analyze your security architecture. -
Successful protocol analysis in modern network structures
Virtual networks and server structures require additional mechanisms to ensure visibility of data streams. We show how to monitor and analyze network functions, even when virtualization is involved. -
Handy Windows tools for sniffing network traffic
You don't need expensive software to study the traffic on your network. We look at some handy sniffers for Windows environments, including SmartSniff, SniffPass, Open Visual Traceroute, and Microsoft Message Analyzer. -
Intruder Detection with tcpdump
Tcpdump is a general-purpose packet sniffer and incident response tool that should be in your tool shed.