Basic introduction
Wireshark is a great open source network protocol analyzer for Unix and Windows. It can detect network communication data in real time, and can also detect network communication data snapshot files it captures. This data can be browsed through a graphical interface, allowing you to view the details of each layer in the network communication packets.
Features
Wireshark has many powerful features:
Includes a rich display filter language and the ability to view TCP session reconstruction streams;
It also supports hundreds of protocols and media types:
There is a command line version called tethereal similar to tcpdump (a network protocol analysis tool under Linux).
In the past, network packet analysis software was very expensive or specialized for commercial applications.
The emergence of Ethereal changed everything.
Under the protection of the GNU GPL general license, users can obtain software and its code for free, and have the right to modify and customize its source code. Ethereal is one of the most extensive network packet analysis software in the world.
Useful
Useful
Useful