Thursday, March 22, 2012

Wireshark packet filtering

Wireshark is a tool for packet filtering in network adapter.

Use following steps to capture packets in Wireshark.

1) Start network interface for capturing for Wireshark Capture/Interfaces
2) Enter filtering in Wireshark filtering option under menu bar

    Ex :- ip.addr==192.172.145.26
    Above is a filtering packets for ip "192.172.145.26"

3) Right-click on a packet and Follow TCP stream. This gives packet contents.