Wireshark User's Guide
Total Page:16
File Type:pdf, Size:1020Kb
Wireshark User’s Guide For Wireshark 2.1 Ulf Lamping <ulf.lamping[AT]web.de> Richard Sharpe, NS Computer Software and Services P/L <rsharpe[AT]ns.aus.com> Ed Warnicke <hagbard[AT]physics.rutgers.edu> Wireshark User’s Guide: For Wireshark 2.1 by Ulf Lamping, Richard Sharpe, and Ed Warnicke Copyright © 2004-2014 Ulf Lamping, Richard Sharpe, Ed Warnicke Permission is granted to copy, distribute and/or modify this document under the terms of the GNU General Public License, Version 2 or any later version published by the Free Software Foundation. All logos and trademarks in this document are property of their respective owner. Preface ...................................................................................................................... viii 1. Foreword ....................................................................................................... viii 2. Who should read this document? ....................................................................... viii 3. Acknowledgements .......................................................................................... viii 4. About this document ......................................................................................... ix 5. Where to get the latest copy of this document? ....................................................... ix 6. Providing feedback about this document ............................................................... ix 1. Introduction .............................................................................................................. 1 1.1. What is Wireshark? ......................................................................................... 1 1.1.1. Some intended purposes ......................................................................... 1 1.1.2. Features ............................................................................................... 1 1.1.3. Live capture from many different network media ........................................ 2 1.1.4. Import files from many other capture programs .......................................... 2 1.1.5. Export files for many other capture programs ............................................. 2 1.1.6. Many protocol dissectors ........................................................................ 2 1.1.7. Open Source Software ........................................................................... 2 1.1.8. What Wireshark is not ........................................................................... 2 1.2. System Requirements ....................................................................................... 2 1.2.1. Microsoft Windows ............................................................................... 3 1.2.2. UNIX / Linux ....................................................................................... 3 1.3. Where to get Wireshark .................................................................................... 4 1.4. A brief history of Wireshark ............................................................................. 4 1.5. Development and maintenance of Wireshark ........................................................ 5 1.6. Reporting problems and getting help ................................................................... 5 1.6.1. Website ............................................................................................... 5 1.6.2. Wiki ................................................................................................... 5 1.6.3. Q&A Site ............................................................................................ 5 1.6.4. FAQ ................................................................................................... 6 1.6.5. Mailing Lists ........................................................................................ 6 1.6.6. Reporting Problems ............................................................................... 6 1.6.7. Reporting Crashes on UNIX/Linux platforms ............................................. 7 1.6.8. Reporting Crashes on Windows platforms ................................................. 7 2. Building and Installing Wireshark ................................................................................. 8 2.1. Introduction .................................................................................................... 8 2.2. Obtaining the source and binary distributions ....................................................... 8 2.3. Installing Wireshark under Windows .................................................................. 8 2.3.1. Installation Components ......................................................................... 8 2.3.2. Additional Tasks ................................................................................... 9 2.3.3. Install Location ..................................................................................... 9 2.3.4. Installing WinPcap ................................................................................ 9 2.3.5. Windows installer command line options ................................................. 10 2.3.6. Manual WinPcap Installation ................................................................. 10 2.3.7. Update Wireshark ................................................................................ 10 2.3.8. Update WinPcap ................................................................................. 10 2.3.9. Uninstall Wireshark ............................................................................. 10 2.3.10. Uninstall WinPcap ............................................................................. 11 2.4. Installing Wireshark under OS X ...................................................................... 11 2.5. Building Wireshark from source under UNIX ..................................................... 11 2.6. Installing the binaries under UNIX ................................................................... 11 2.6.1. Installing from RPM’s under Red Hat and alike ........................................ 12 2.6.2. Installing from deb’s under Debian, Ubuntu and other Debian derivatives ....... 12 2.6.3. Installing from portage under Gentoo Linux ............................................. 12 2.6.4. Installing from packages under FreeBSD ................................................. 12 2.7. Troubleshooting during the install on Unix ......................................................... 13 2.8. Building from source under Windows ............................................................... 13 3. User Interface .......................................................................................................... 14 3.1. Introduction .................................................................................................. 14 3.2. Start Wireshark ............................................................................................. 14 iii Wireshark User’s Guide 3.3. The Main window .......................................................................................... 14 3.3.1. Main Window Navigation ..................................................................... 15 3.4. The Menu ..................................................................................................... 15 3.5. The “File” menu ............................................................................................ 17 3.6. The “Edit” menu ........................................................................................... 19 3.7. The “View” menu .......................................................................................... 21 3.8. The “Go” menu ............................................................................................. 25 3.9. The “Capture” menu ...................................................................................... 26 3.10. The “Analyze” menu .................................................................................... 27 3.11. The “Statistics” menu ................................................................................... 28 3.12. The “Telephony” menu ................................................................................. 30 3.13. The “Tools” menu ........................................................................................ 30 3.14. The “Internals” menu .................................................................................... 31 3.15. The “Help” menu ......................................................................................... 31 3.16. The “Main” toolbar ...................................................................................... 32 3.17. The “Filter” toolbar ...................................................................................... 36 3.18. The “Packet List” pane ................................................................................. 37 3.19. The “Packet Details” pane ............................................................................. 37 3.20. The “Packet Bytes” pane ............................................................................... 38 3.21. The Statusbar .............................................................................................. 38 4. Capturing Live Network Data ..................................................................................... 40 4.1. Introduction .................................................................................................. 40 4.2. Prerequisites .................................................................................................