Wireshark For Catching Passwords on HTTP Demo By Dr Pritam Shah

By Dr.Pritam Shah PhD UC Australia

What is Wireshark?

Wireshark is an open-source network protocol analysis software program started by Gerald Combs in 1998. A global organization of network specialists and software developers support Wireshark and continue to make updates for new network technologies and encryption methods.

There are questions about the legality of Wireshark since it is a powerful packet sniffer. The Light side of the Force says that you should only use Wireshark on networks where you have permission to inspect network packets. Using Wireshark to look at packets without permission is a path to the Dark Side.

How does Wireshark work?

Wireshark is a packet sniffer and analysis tool. It captures network packets on the local network and stores that data for offline analysis. Wireshark captures network traffic from Ethernet, Bluetooth, Wireless (IEEE.802.11), Token Ring, Frame Relay connections, and more.

Ed. Note: A “packet” is a single message from any network protocol (i.e., TCP, DNS, etc.)

Ed. Note 2: LAN packet is in broadcast mode, meaning a single computer with Wireshark can see packet between two other computers. If you want to see packet to an external site, you need to capture the packets on the local computer.

Wireshark allows you to filter the log either before the capture starts or during analysis, so you can narrow down and zero into what you are looking for in the network trace.

[hii_RAHULGOYAL]

Sir wireshark is also available on the website to run on windows os . is it safe to use directly on windows?

[shivdeshmukh]

Sir, do the Wireshark is same as Burp suit?
the burp only intercepts browser request on the same system.