Wireshark is a free and open source packet analyzer used for network troubleshooting and analysis. These activities will show you how to use Wireshark to start a network capture.
Readings
Multimedia
Preparation
To prepare for this activity:
- Start Windows.
- Log in if necessary.
- Install Wireshark.
Activity 1 - Start Wireshark
Two different methods for starting Wireshark are available. These include the Start menu and the Run command box.
Method 1 - Start Menu
To start Wireshark using the Start menu:
- Open the Start menu.
- Select All Programs.
- Select Wireshark.
Method 2 - Run Command
To start Wireshark using the Run command box:
- Open the Start menu or press the Windows key + R.
- Type Wireshark in the Run command box.
- Press Enter.
Activity 2 - Open the Capture Interfaces Dialog Box
Three different methods for opening the Capture Interfaces dialog box are available. These include the Capture menu, the Capture Interfaces toolbar button, and the Capture Interfaces keyboard shortcut.
Method 1 - Capture Menu
To open the Capture Interfaces dialog box using the Capture menu:
- Select the Capture menu.
- Select Interfaces.
Method 2 - Capture Interfaces Toolbar Button
To open the Capture Interfaces dialog box using the Capture interfaces Toolbar button:
- Locate the toolbar button with the help text List the available capture interfaces. This should be the first toolbar button on the left.
- Click the Capture Interfaces toolbar button.
Method 3 - Capture Interfaces Keyboard Shortcut
To open the Capture Interfaces dialog box using the Capture interfaces keyboard shortcut:
- Press <Ctrl> + I.
Activity 3 - Start a Wireshark Capture
To start a Wireshark capture from the Capture Interfaces dialog box:
- Observe the available interfaces. If you have multiple interfaces displayed, look for the interface with the highest packet count. This is your most active network interface.
- Select the interface you want to use for the capture using the check box on the left.
- Select Start to begin the capture.