Wireshark packet capture tutorial

Disclaimer: This article is a blogger original article, shall not be reproduced without the bloggers allowed. https://blog.csdn.net/young2415/article/details/90414132

Run as administrator Wireshark, then open the following display interface:

This displays all network cards on your computer (including real and virtual NIC card) and USB interface, double-click on any one card is in use, the interface will appear as follows:

the upper left corner the red square light to show that capture all packets through the network will be intercepted to this card, click on the red square can stop packet capture.

Ethereal rules introduced

Above the text box you can enter some rules for packet filtering caught. such as:

• Look UDP protocol packet, can be entered udpand the transport;
• If you want to see a port using the UDP protocol, you can enter udp.port == 端口号
• To see if the destination IP address 192.168.1.123 package can enter ip.dst ==192.168.1.123and the transport;
• A plurality of conditions can be entered, and between the connection conditions.