Wireshark
Network Security 6 commands

Wireshark

Network protocol analyzer that lets you capture and interactively browse traffic on a network. Essential for network troubleshooting and analysis.

packet-analysisnetworktrafficforensics
Official docs

Installation

sudo apt install wireshark
# or
brew install --cask wireshark
# or download from wireshark.org

Commands & usage

6 entries
  • tcp.port == 80

    Filter by TCP port

  • ip.addr == 192.168.1.1

    Filter by IP address

  • http.request.method == POST

    Filter HTTP POST requests

  • dns

    Show only DNS traffic

  • tcp.flags.syn == 1

    Show SYN packets

  • frame contains "password"

    Search for string in packets

Use cases

Network troubleshootingPacket analysisProtocol debuggingSecurity forensicsTraffic monitoring