[Tools] How to use wireshark to capture packets Highlighted

Created: Dec 7, 2018 15:43:05Latest reply: Apr 15, 2019 14:02:15 2265 54 9 6

 During our troubleshooting, we need to capture packets to analysis the detailed problem. We usually use software such as wireshark to do this task. In this post, we will introduce how to use wireshark to capture packets.

1. open wireshark, select the NIC, then start to capture, as shown below.phase 1


2. main interface when capture packets, 

phase 2


3. If we want the result more visualization , we can open IO graphs, follow the steps below:phase 3


4. IO graphs display the visualized result by using time range as X axis.phase 4


This way to capture packets is not available on switch, when we need to capture packets on switch, we need to configure port-mirroring, which we will introduce in the next post.

  • x
  • convention:

xiaomumu Created Dec 20, 2018 11:22:38
Wireless LAN interface can also capture?  
dengdengdeng Created Jan 18, 2019 23:17:59
good  
Salnaguide.com Created Jan 30, 2019 07:33:57
Thanks for Sharing such best information https://www.salnaguide.com  
sim_157     Created Dec 8, 2018 12:16:01 Helpful(0) Helpful(0)

thanks for sharing,
  • x
  • convention:

dengdengdeng Created Jan 18, 2019 22:56:12
good  
Jamalb     Created Dec 9, 2018 15:40:38 Helpful(0) Helpful(0)

fine ...
  • x
  • convention:

Jbattikh
Bitaites     Created Dec 10, 2018 02:42:47 Helpful(0) Helpful(0)

I´m interested in port mirroring capture!! Then please share.
  • x
  • convention:

Mihnea  Enthusiast Technician   Created Dec 10, 2018 21:17:20 Helpful(1) Helpful(1)

Posted by Bitaites at 2018-12-10 02:42 I´m interested in port mirroring capture!! Then please share.

Obtaining Packets from Switch Mirrored Environment


On the switch, the mirroring port and observing port are installed. Connect the laptop with the switch through the observing port. Start the Wireshark on the laptop to capture packets.


For details about setting the mirroring port and observing port, see the corresponding switch product documentation or ask Datacom personnel for help.


Relevant concepts and principles are as follows:



portmirror

 

1.       Mirroring port and observing port:


Mirroring port: Indicates the port that is being monitored. All the packets that pass through a mirroring port are copied to the observing port.


Observing port: Indicates the port that is connected to a monitoring device and used to send packets from the mirrored port to the monitoring device.


An observing port is dedicated to forwarding mirrored traffic. Do not configure other services on an observing port; otherwise, mirrored traffic and other service traffic interfere with each other.


If the mirroring function is deployed on many ports of a device, a great deal of internal forwarding bandwidth will be occupied, which affects the forwarding of other services. Additionally, if the mirrored port bandwidth is higher than the observing port bandwidth, for example, 1000 Mbit/s on a mirrored port and 100 Mbit/s on an observing port, the observing port will fail to forward all mirrored packets in a timely manner because of insufficient bandwidth, leading to packet loss.


2.       Mirroring Direction


The mirroring direction refers to the direction in which the device copies packets on the mirrored port to the observing port:


Inbound: The device mirrors the packets that are received by the mirrored port to the observing port.


Outbound: The device mirrors the packets that are sent from the mirrored port to the observing port.


Bidirectional: The device mirrors the packets that are received and sent by the mirrored port to the observing port.


This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention:

phpinterview1991     Created Dec 11, 2018 17:30:20 Helpful(0) Helpful(0)

This post was last edited by phpinterview1991 at 2018-12-11 17:32. Thanks for posting useful information.You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...Really it was an awesome article...very interesting to read..please sharing like this information......

php interview questions , php interview questions and answers, php interview questions and answers for freshers
  • x
  • convention:

php interview questions , [url= ]php interview questions and answer
EdenHazard10     Created Dec 12, 2018 02:01:59 Helpful(0) Helpful(0)

Nice idea
  • x
  • convention:

jomos     Created Dec 12, 2018 02:06:59 Helpful(0) Helpful(0)

Good
  • x
  • convention:

EdenHazard10     Created Dec 12, 2018 20:47:58 Helpful(0) Helpful(0)

Need more information
  • x
  • convention:

jomos     Created Dec 12, 2018 20:51:33 Helpful(0) Helpful(0)

Good
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top