Tools
Wireshark
Network protocol and packet analyzer
Wireshark is a free open source network protocol analyzer. It allows capturing and interactively browsing network traffic. An indispensable tool for network troubleshooting and security analysis.
Features
- Real-time traffic capture
- Support for hundreds of protocols
- Powerful display filters
- Graphical flow analysis
- Encrypted traffic decoding (with keys)
- Export to various formats
Display Filters
# HTTP traffic
http
# Traffic from specific IP
ip.addr == 192.168.1.1
# TCP port
tcp.port == 443
# DNS queries
dns
# Combined filters
http && ip.src == 192.168.1.1
Applications
- Network troubleshooting
- Security analysis
- Protocol development
- Network technology education
External Links
Category
Burp Suite, Nmap, Metasploit, pentest and audit tools