Task $1$: Sniffing Packets Using Wireshark

Packet Analysis Wireshark is an open source cross$-$platform packet capture and analysis tool, with versions for Windows and Linux. The GUI window gives a detailed breakdown of the network protocol stack for each packet, colorizing packet details based on protocol, as well as having functionality to filter and search the traffic, and pick out TCP streams. Wireshark can also save packet data to files for offline analysis and export$/$import packet captures to$/$from other tools. Statistics can also be generated for packet capture files.

Wireshark can be used for network troubleshooting, to investigate security issues, and to analyse and understand network protocols. The packet sniffer can exploit information passed in plaintext, i$.$e$.$ not

ICT$205$ Compiled by: Saeid Iranmanesh

encrypted. Examples of protocols which pass information in plaintext are Telnet, FTP$,$ SNMP$,$ POP, and HTTP$.$