[Tools] How to use wireshark to capture packets Highlighted

Latest reply: Aug 8, 2019 10:05:46 3652 64 11 6

 During our troubleshooting, we need to capture packets to analysis the detailed problem. We usually use software such as wireshark to do this task. In this post, we will introduce how to use wireshark to capture packets.

1. open wireshark, select the NIC, then start to capture, as shown below.phase 1


2. main interface when capture packets, 

phase 2


3. If we want the result more visualization , we can open IO graphs, follow the steps below:phase 3


4. IO graphs display the visualized result by using time range as X axis.phase 4


This way to capture packets is not available on switch, when we need to capture packets on switch, we need to configure port-mirroring, which we will introduce in the next post.

  • x
  • convention:

xiaomumu
xiaomumu Created Dec 20, 2018 03:22:38
Wireless LAN interface can also capture?  
dengdengdeng
dengdengdeng Created Jan 18, 2019 15:17:59
good  
Salnaguide.com
Salnaguide.com Created Jan 29, 2019 23:33:57
Thanks for Sharing such best information https://www.salnaguide.com  
sim_157
Created Dec 8, 2018 04:16:01 Helpful(0) Helpful(0)

thanks for sharing, [Tools] How to use wireshark to capture packets-2817021-1
  • x
  • convention:

dengdengdeng
dengdengdeng Created Jan 18, 2019 14:56:12
good  
Jamalb
Created Dec 9, 2018 07:40:38 Helpful(0) Helpful(0)

fine ...
  • x
  • convention:

ICT%20Eng%20JBattikh
Bitaites
Created Dec 9, 2018 18:42:47 Helpful(0) Helpful(0)

I´m interested in port mirroring capture!! Then please share.
  • x
  • convention:

Mihnea
Created Dec 10, 2018 13:17:20 Helpful(2) Helpful(2)

Posted by Bitaites at 2018-12-09 18:42 I´m interested in port mirroring capture!! Then please share.

Obtaining Packets from Switch Mirrored Environment


On the switch, the mirroring port and observing port are installed. Connect the laptop with the switch through the observing port. Start the Wireshark on the laptop to capture packets.


For details about setting the mirroring port and observing port, see the corresponding switch product documentation or ask Datacom personnel for help.


Relevant concepts and principles are as follows:



portmirror

 

1.       Mirroring port and observing port:


Mirroring port: Indicates the port that is being monitored. All the packets that pass through a mirroring port are copied to the observing port.


Observing port: Indicates the port that is connected to a monitoring device and used to send packets from the mirrored port to the monitoring device.


An observing port is dedicated to forwarding mirrored traffic. Do not configure other services on an observing port; otherwise, mirrored traffic and other service traffic interfere with each other.


If the mirroring function is deployed on many ports of a device, a great deal of internal forwarding bandwidth will be occupied, which affects the forwarding of other services. Additionally, if the mirrored port bandwidth is higher than the observing port bandwidth, for example, 1000 Mbit/s on a mirrored port and 100 Mbit/s on an observing port, the observing port will fail to forward all mirrored packets in a timely manner because of insufficient bandwidth, leading to packet loss.


2.       Mirroring Direction


The mirroring direction refers to the direction in which the device copies packets on the mirrored port to the observing port:


Inbound: The device mirrors the packets that are received by the mirrored port to the observing port.


Outbound: The device mirrors the packets that are sent from the mirrored port to the observing port.


Bidirectional: The device mirrors the packets that are received and sent by the mirrored port to the observing port.


This article contains more resources

You need to log in to download or view. No account?Register

x
  • x
  • convention:

Hblack
Hblack Created Jul 2, 2019 01:20:41
This is an excelent article!  
phpinterview1991
Created Dec 11, 2018 09:30:20 Helpful(0) Helpful(0)

Thanks for posting useful information.You have provided an nice article, Thank you very much for this one. And i hope this will be useful for many people.. and i am waiting for your next post keep on updating these kinds of knowledgeable things...Really it was an awesome article...very interesting to read..please sharing like this information......

php interview questions , php interview questions and answers, php interview questions and answers for freshers This post was last edited by phpinterview1991 at 2018-12-11 09:32.
  • x
  • convention:

php interview questions , [url= ]php interview questions and answer
EdeninRealMadrid
Created Dec 11, 2018 18:01:59 Helpful(0) Helpful(0)

Nice idea
  • x
  • convention:

jomos
Created Dec 11, 2018 18:06:59 Helpful(0) Helpful(0)

Good
  • x
  • convention:

EdeninRealMadrid
Created Dec 12, 2018 12:47:58 Helpful(0) Helpful(0)

Need more information
  • x
  • convention:

jomos
Created Dec 12, 2018 12:51:33 Helpful(0) Helpful(0)

Good
  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login