Wireshark
·89 words·1 min·
0
Table of Contents
Tool's Home Page
Overview #
Wireshark captures network traffic and breaks each packet down into its protocol layers, so you can read what was sent. It runs on Linux, macOS and Windows.
- Capture: record traffic from a network interface.
- Display filters: show only the packets you care about, such as
httporip.addr == 10.0.0.5. - Follow streams: rebuild a whole TCP or HTTP conversation from its packets.
The command-line version, TShark, comes with it and is useful for scripting. Only capture traffic on networks you are allowed to monitor.