From the course: Practical Cybersecurity for IT Professionals

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Capturing packets with Wireshark

Capturing packets with Wireshark

- To look at network traffic. We need to use, what's known as a Network Protocol Analyzer. One of the most popular is Wireshark. Wireshark is free to use and runs on many platforms. And for this module of the course we'll run Wireshark on our Hydra Virtual Machine. We can download Wireshark from its website and manually install it. Or in Ubuntu we can use the standard APT installation technique. Let's do that. Sudo APT install Wireshark. Okay, we're installed now. So let's open it. Sudo Wireshark, Note that I started this with Sudo as it needs to do privileged operations to capture packets. The first thing I'll do is to select the network interface I want to use. In the area titled capture just below the start caption, you can see the list of interfaces on the computer. Let's select any. And we click on the sharkfin to start the capture. Let's set up a listener on Scorpio, NC minus LP, 4545. I've opened a new…

Contents