Detailed graphic and text tutorials on how to grab the package by wireshark and wireshark

Wireshark is a very popular network packet analysis software, very powerful. It can intercept various network packets and display detailed information of network packets. Wireshark users must understand network protocols or they won't understand wireshark.

For security reasons, Wireshark can only view packets and cannot modify the contents of packets or send packets.

（/** * Network Packets-> Computers can only recognize binary data, and data is stored in binary in computers. To achieve communication between multiple computers, we must rely on certain communication protocols, such as TCP/IP/HTTP and other network protocols. In order to distinguish between each protocol, the protocol used in the transmission of data is added to the specified format. The process by which packets are transmitted over a network using a specified protocol is called network encapsulation. It can also be understood as packaging and sending data. For example, if the courier wants to deliver your purchase to your home, he must first package it, then add your personal information, and finally deliver it to you. The whole process is called packaging. ***/)

For example, use Wireshark to view TCP, UDP.

(TCP,UDP http://www.cnblogs.com/bizhu/archive/2012/05/12/2497493.html)

Wireshark is a network packet that captures a certain network card on your machine. When you have multiple network cards on your machine, you need to select a network card.

Wireshark Window Introduction

/** *

Linux network packet analysis tool tcpdump

tcpdump is a packet analysis tool that intercepts packets on a network according to user definitions.

Wireshark(formerly ethereal) is a very easy to use package capture tool for Windows. But it is difficult to find a good graphical package capture tool under Linux. Fortunately, there is Tcpdump. We can do this with the perfect combination of Tcpdump + Wireshark: capturing packets in Linux and analyzing them in Windows

***/