Difference between revisions of "How to capture packets using wireshark"
From Kolmisoft Wiki
Jump to navigationJump to search
(→Usage) |
|||
| Line 14: | Line 14: | ||
After that you can use command: | After that you can use command: | ||
tethereal -i eth0 -w /home/capture.pcap | tethereal -i eth0 -w /home/capture.pcap | ||
To save a dump of packets. | To save a dump of packets. | ||
| Line 24: | Line 24: | ||
You can analyse network packets on real time on server using command: | You can analyse network packets on real time on server using command: | ||
tshark | tshark | ||
More options with command tshark you can find [http://www.wireshark.org/docs/wsug_html_chunked/AppToolstshark.html here]. | More options with command tshark you can find [http://www.wireshark.org/docs/wsug_html_chunked/AppToolstshark.html here]. | ||
Revision as of 14:46, 17 November 2011
About
Wireshark is the world's foremost network protocol analyzer.
It lets you capture and interactively browse the traffic running on a computer network. More information about Wireshark can be found here
Install
To install Wireshark put this command to Terminal:
yum install Wireshark
Usage
After that you can use command:
tethereal -i eth0 -w /home/capture.pcap
To save a dump of packets.
Packets will be saved to directory /home/capture.pcap
You can send captured file capture.pcap from your server and open with Wireshark GUI and analyse the packets.
You can analyse network packets on real time on server using command:
tshark
More options with command tshark you can find here.
