Wireshark

Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions.

Installation⚑

apt-get install wireshark

If the version delivered by your distribution is not high enough, use Jezz's Docker

docker run -d \
    -v /etc/localtime:/etc/localtime:ro \
    -v /tmp/.X11-unix:/tmp/.X11-unix \
    -e DISPLAY=unix$DISPLAY \
    -v /tmp/wireshark:/data \
    jess/wireshark

Usage⚑

Filter⚑

You can filter by traffic type with tcp and tcp.port == 80, http or ftp or not ftp.

It's also possible to nest many operators with (http or ftp) and ip.addr == 192.168.1.14

The most common filters are:

References⚑

• Home