190 likes | 212 Views
Learn about Wireshark, a powerful packet capture and protocol analyzer tool. Understand its functions, why it's essential for network troubleshooting, and how to use it effectively. Dive into network traffic analysis and solve complex issues with ease.
E N D
Tech Talk Live 2018 Roy Hoover roy_hoover@iu13.org Intro to WiresharkWhat is it? What does it do? Why do I need it?
Wireshark- What is it • Packet Capture • Protocol Analyzer • Network Analyzer
Wireshark- What does it do • Analyze bits on the wire (or in the air) • Break down packets into their components • See what’s actually happening on your network
Wireshark- Why do I need it • More detail on problems • Tech support requested a capture • Need to open a .PCAP file • Want to understand network traffic flow in greater detail • “Thorny” problems • Don’t get lost in the weeds!
Wireshark • What is it • Windows, OS X, Linux, and UNIX • Open Source • www.wireshark.org • Pcap • Previously called Ethereal • Promiscuous mode • Legal stuff
OSI Model 7 Application Telnet, e-mail 6 Presentation Pict, GIF 5 Session NFS, SQL 4 Transport TCP,UDP,SPX 3 Network IPv4, IPv6, IPX 2 Data Link Ethernet, Token Ring 1 Physical Copper, Fiber, Radio Waves
Rabbit Hole Serial Communications What settings does a Cisco console port use? 9600 8N1
Serial line sending “OK” At 9600 Bits Per Second 1/(9600 bps) or 104 µs per bit. Decimal Hex Binary 0 0 0000 1 1 0001 2 2 0010 3 3 0011 4 4 0100 5 5 0101 6 6 0110 7 7 0111 8 8 1000 9 9 1001 10 A 1010 11 B 1011 12 C 1100 13 D 1101 14 E 1110 15 F 1111 4F 01001111
IPv4 Packet Ethernet Frame
IPv6 Packet Header Ethernet Frame
Getting Packets • On your machine • Hub • Switch • Watch your link utilization! • Mirror a port • SPAN • Tap
Install Wireshark 2.6.0 (May 2, 2018)https://www.wireshark.org/#download
Sample Captures https://wiki.wireshark.org/SampleCaptures#Sample_Captures
Questions? • Roy Hoover • roy_hoover@iu13.org