Introduction to Wireshark

  1. Who is Gerald Combs?
  2. Gerald Combs is a University of Missouri computer science graduate and creator, lead developor, and director of Wireshark.

  3. What does a protocol analyzer like Wireshark do?
  4. Wireshark is a network traffic/packet analyzer. It can be used for network troubleshooting, analysis, software, and communications protocol development. It allows the user to analyze traffic coming into and out of the network and makes packets more easily understood to the user.

  5. In the Wireshark Interface, what is the Packet List?
  6. The Packet List lists all packets captured by the program.

  7. In the Wireshark Interface, what is the Packet Detal?
  8. Packet Detail lists all specific details about a packet selected in the Packet List.

  9. What privileges do you need to run Wireshark? Why?
  10. An account with sufficient privileges to capture is required to run Wireshark, such as an administrator account. This is so the average network user cannot view all of traffic, or its details, flowing into and out of the network.

  11. What is a Wireshark display filter?
  12. A display filter will allow the user to filter packets that only fit, or do not fit, certain criteria that has been selected.

  13. If you right click on a packet, what are you presented with?
  14. Right clicking a packet will provide additional menu options with which to analyze the packet.

  15. Describe the display filter employed when you right click and selected "Follow TCP Stream".
  16. A window is displayed that shows only the captured packets that follow the TCP stream.

  17. Where can you go to find more information about packet capture with Wireshark?
  18. The Wireshark website, www.wireshark.org, has more information.