Wireshark is an open-source network protocol analysis software program started by Gerald

Combs in 1998. Wireshark is a packet sniffer and analysis tool. It captures network traffic on the
local network and stores that data for offline analysis. Wireshark captures network traffic from
Ethernet, Bluetooth, Wireless (IEEE.802.11), Token Ring, Frame Relay connections, and more.

a) Capturing Data Packets on Wireshark

No.: This is the number order of the packet that got captured. The bracket indicates that this
packet is part of a conversation.

Time: This column shows you how long after you started the capture that this packet got
captured.

Source: This is the address of the system that sent the packet.

Destination: This is the address of the destination of that packet.

Protocol: This is the type of packet, for example, TCP, DNS, ARP etc.

Length: This column shows you the length of the packet in bytes.

Info: This column shows you more information about the packet contents, and will vary
depending on what kind of packet it is.
b) Packet Details

The above figure shows the packet details of the 4 th packet captured. The packet details are
mainly divided into 4 parts that are the frame/packet with its number, the Ethernet which shows
source and destination of the packet, the IP version i.e. IPv4 or IPv6 and the protocol type (TCP,
UDP, ARP etc.).

The Frame part further shows the frame length, capture length in bytes, arrival time of the packet
and interface description such as Ethernet, Wifi etc.

The Ethernet part shows the destination name and address, source name and address and the type
of IP address that is either IPv4 or IPv6.

The internet protocol version gives the IP version and the source and destination address, header
length in bytes, fragment offset and header checksum value.

Next the protocol type tells the type of protocol e.g. TCP or ARP etc. source port and destination
port number. It also gives sequence number and acknowledgement number.
c) Capture Filter Properties
d) Wireshark I/O graph
e) Traceroute using Wireshark
f) Sequence Number (TCP trace)