2026-04-12 14-35-44
May 25, 2026 13:44
· 13:03
· English
· Whisper Turbo
· 2 Locutores
Haec pagina de translatio explicat.
Despectus in Viam Permanentem →
Videtur solum
0:05
S…
Speaker 1 (2026-04-12 14-35-44)
Wireshark is one of the most popular and
0:09
S…
Speaker 1 (2026-04-12 14-35-44)
most widely used applications when it comes to capturing
0:14
S…
Speaker 1 (2026-04-12 14-35-44)
packets and performing packet analysis.
0:17
S…
Speaker 1 (2026-04-12 14-35-44)
So in this video,
0:19
S…
Speaker 1 (2026-04-12 14-35-44)
we're going to take a look at some of the capturing
0:23
S…
Speaker 1 (2026-04-12 14-35-44)
abilities within Wireshark and what those packets look
0:27
S…
Speaker 1 (2026-04-12 14-35-44)
like.
0:28
S…
Speaker 1 (2026-04-12 14-35-44)
Before we get into it,
0:30
S…
Speaker 1 (2026-04-12 14-35-44)
just a couple of quick notes about Wireshark.
0:33
S…
Speaker 1 (2026-04-12 14-35-44)
First of all, when we're talking about capturing packets,
0:36
S…
Speaker 1 (2026-04-12 14-35-44)
it's only going to be able to capture packets that are communicating
0:41
S…
Speaker 1 (2026-04-12 14-35-44)
with the machine Wireshark is installed on,
0:44
S…
Speaker 1 (2026-04-12 14-35-44)
either as the source
0:45
S…
Speaker 1 (2026-04-12 14-35-44)
or the destination when we're talking about capturing packets.
0:48
S…
Speaker 1 (2026-04-12 14-35-44)
Of course, with analysis,
0:50
S…
Speaker 1 (2026-04-12 14-35-44)
if we're looking at a previously captured file,
0:55
S…
Speaker 1 (2026-04-12 14-35-44)
a PCAP file,
0:55
S…
Speaker 1 (2026-04-12 14-35-44)
or any other format of packet capture file,
0:58
S…
Speaker 1 (2026-04-12 14-35-44)
we can examine packets from any computer.
1:01
S…
Speaker 1 (2026-04-12 14-35-44)
It doesn't matter which one they came from as long as they were
1:05
S…
Speaker 1 (2026-04-12 14-35-44)
properly captured.
1:06
S…
Speaker 1 (2026-04-12 14-35-44)
It only applies to the analysis for the current
1:11
S…
Speaker 1 (2026-04-12 14-35-44)
live machine.
1:13
S…
Speaker 1 (2026-04-12 14-35-44)
Wireshark has a number of ways to kind of filter out data
1:17
S…
Speaker 1 (2026-04-12 14-35-44)
that is both captured and displayed using different
1:21
S…
Speaker 1 (2026-04-12 14-35-44)
syntax for each.
1:23
S…
Speaker 1 (2026-04-12 14-35-44)
For capture filter or for capturing packets,
1:27
S…
Speaker 1 (2026-04-12 14-35-44)
you have what you're called your capture filters,
1:29
S…
Speaker 1 (2026-04-12 14-35-44)
very appropriate name.
1:31
S…
Speaker 1 (2026-04-12 14-35-44)
And they are designed to limit the amount of data that
1:35
S…
Speaker 1 (2026-04-12 14-35-44)
is captured and saved using Wireshark.
1:38
S…
Speaker 1 (2026-04-12 14-35-44)
This is a live filter and it does affect what
1:43
S…
Speaker 1 (2026-04-12 14-35-44)
information is actually saved or analyzed by a Wireshark
1:47
S…
Speaker 1 (2026-04-12 14-35-44)
and what can be saved into a PCAP file.
1:51
S…
Speaker 1 (2026-04-12 14-35-44)
The benefit for capture filters is that it does reduce
1:56
S…
Speaker 1 (2026-04-12 14-35-44)
the processing requirements for Wireshark and makes it easier to
2:00
S…
Speaker 1 (2026-04-12 14-35-44)
run on a lower end machine,
2:02
S…
Speaker 1 (2026-04-12 14-35-44)
and it also can help reduce the size of the file
2:07
S…
Speaker 1 (2026-04-12 14-35-44)
that is that is saved after the capture is complete.
2:10
S…
Speaker 1 (2026-04-12 14-35-44)
Now you do have the side effect there of
2:14
S…
Speaker 1 (2026-04-12 14-35-44)
If the traffic that is on the machine is
2:18
S…
Speaker 1 (2026-04-12 14-35-44)
not included in that capture file,
2:20
S…
Speaker 1 (2026-04-12 14-35-44)
it is not going to be seen by Wireshark.
2:22
S…
Speaker 1 (2026-04-12 14-35-44)
It is not going to be saved in the PCAP.
2:25
S…
Speaker 1 (2026-04-12 14-35-44)
So something to keep in mind when you are working with
2:29
S…
Speaker 1 (2026-04-12 14-35-44)
capture filters.
2:31
S…
Speaker 1 (2026-04-12 14-35-44)
And you also have display filters.
2:33
S…
Speaker 1 (2026-04-12 14-35-44)
These can be used either while capturing or they can be used
2:38
S…
Speaker 1 (2026-04-12 14-35-44)
during the packet analysis phase,
2:41
S…
Speaker 1 (2026-04-12 14-35-44)
either immediately after a packet capture or while you're capturing
2:45
S…
Speaker 1 (2026-04-12 14-35-44)
packets or from a previously saved capture
2:50
S…
Speaker 1 (2026-04-12 14-35-44)
session.
2:51
S…
Speaker 1 (2026-04-12 14-35-44)
Display filters don't reduce any of the processing overhead
2:55
S…
Speaker 1 (2026-04-12 14-35-44)
for Wireshark.
2:56
S…
Speaker 1 (2026-04-12 14-35-44)
They don't affect the information that is in.
2:59
S…
Speaker 1 (2026-04-12 14-35-44)
the capture or anything like that.
3:01
S…
Speaker 1 (2026-04-12 14-35-44)
They are only kind of filtering out the information
3:05
S…
Speaker 1 (2026-04-12 14-35-44)
that is shown to you,
3:07
S…
Speaker 1 (2026-04-12 14-35-44)
as the name implies,
3:08
S…
Speaker 1 (2026-04-12 14-35-44)
with a display filter.
3:11
S…
Speaker 1 (2026-04-12 14-35-44)
Now from the analysis component of Wireshark,
3:15
S…
Speaker 1 (2026-04-12 14-35-44)
you have what is known as a feature called follow stream.
3:19
S…
Speaker 1 (2026-04-12 14-35-44)
Now this is a feature that makes it a lot easier
3:24
S…
Speaker 1 (2026-04-12 14-35-44)
to analyze information that Wireshark has captured.
3:27
S…
Speaker 1 (2026-04-12 14-35-44)
Basically,
3:28
S…
Speaker 1 (2026-04-12 14-35-44)
and we'll take a look at this in more detail when we get into the video for analysis
3:32
S…
Speaker 1 (2026-04-12 14-35-44)
using Wireshark.
3:34
S…
Speaker 1 (2026-04-12 14-35-44)
But essentially, you are able to pick a specific packet from the list
3:38
S…
Speaker 1 (2026-04-12 14-35-44)
of packets and select that one to follow
3:42
S…
Speaker 1 (2026-04-12 14-35-44)
the stream.
3:43
S…
Speaker 1 (2026-04-12 14-35-44)
And it will follow that exact either TCP or UDP
3:47
S…
Speaker 1 (2026-04-12 14-35-44)
path or whatever it is,
3:48
S…
Speaker 1 (2026-04-12 14-35-44)
that communication path,
3:49
S…
Speaker 1 (2026-04-12 14-35-44)
and only show data from that specific stream.
3:54
S…
Speaker 1 (2026-04-12 14-35-44)
which helps filter out a lot of the additional information that
3:58
S…
Speaker 1 (2026-04-12 14-35-44)
you may not really,
3:59
S…
Speaker 1 (2026-04-12 14-35-44)
really care about at that moment.
4:02
S…
Speaker 1 (2026-04-12 14-35-44)
Now, it doesn't remove it from the capture.
4:04
S…
Speaker 1 (2026-04-12 14-35-44)
It does not remove it from a previously captured
4:08
S…
Speaker 1 (2026-04-12 14-35-44)
file or anything like that.
4:10
S…
Speaker 1 (2026-04-12 14-35-44)
FollowStream is a type of display filter,
4:14
S…
Speaker 1 (2026-04-12 14-35-44)
and we'll see how this works again later on
4:18
S…
Speaker 1 (2026-04-12 14-35-44)
when we start looking at analysis with Wireshark.
4:22
S…
Speaker 1 (2026-04-12 14-35-44)
So let's go ahead and switch over to our lab environment,
4:25
S…
Speaker 1 (2026-04-12 14-35-44)
and we're going to take a look at how the capture process works in Wireshark.
4:31
S…
Speaker 1 (2026-04-12 14-35-44)
Alright, so here in our lab environment,
4:33
S…
Speaker 1 (2026-04-12 14-35-44)
we have the Wireshark.
4:36
S…
Speaker 1 (2026-04-12 14-35-44)
This is the kind of screen you see when you first launch Wireshark.
4:40
S…
Speaker 1 (2026-04-12 14-35-44)
This is the capture screen.
4:42
S…
Speaker 1 (2026-04-12 14-35-44)
So the options we see here,
4:45
S…
Speaker 1 (2026-04-12 14-35-44)
we see various interfaces that can be used as
4:49
S…
Speaker 1 (2026-04-12 14-35-44)
the capture.
4:49
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to focus on the ETH01 right here.
4:53
S…
Speaker 1 (2026-04-12 14-35-44)
We see a section here to enter a filter for
4:57
S…
Speaker 1 (2026-04-12 14-35-44)
the capture.
4:57
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to leave this blank as the initial capture.
5:00
S…
Speaker 2 (2026-04-12 14-35-44)
capture we do,
5:00
S…
Speaker 2 (2026-04-12 14-35-44)
and then we see when we can enter the display filters as
5:04
S…
Speaker 1 (2026-04-12 14-35-44)
well.
5:05
S…
Speaker 2 (2026-04-12 14-35-44)
So the toolbar up here,
5:07
S…
Speaker 2 (2026-04-12 14-35-44)
you have the option to start the capture,
5:09
S…
Speaker 2 (2026-04-12 14-35-44)
stop the capture,
5:10
S…
Speaker 2 (2026-04-12 14-35-44)
here's a restart,
5:11
S…
Speaker 2 (2026-04-12 14-35-44)
open a previous capture file,
5:14
S…
Speaker 2 (2026-04-12 14-35-44)
and so forth.
5:15
S…
Speaker 2 (2026-04-12 14-35-44)
So what we're going to do is we're going to start out on each zero.
5:18
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to use no capture filter,
5:20
S…
Speaker 2 (2026-04-12 14-35-44)
so it'll capture all packets,
5:22
S…
Speaker 2 (2026-04-12 14-35-44)
and we're going to go ahead and start the capture and see what we get.
5:25
S…
Speaker 2 (2026-04-12 14-35-44)
We see we get a lot of requests and replies.
5:29
S…
Speaker 2 (2026-04-12 14-35-44)
And we're going to take a look at a few tasks
5:33
S…
Speaker 2 (2026-04-12 14-35-44)
on this machine.
5:35
S…
Speaker 2 (2026-04-12 14-35-44)
Starting with,
5:35
S…
Speaker 2 (2026-04-12 14-35-44)
we are going to ping another machine.
5:39
S…
Speaker 1 (2026-04-12 14-35-44)
We are going to ping this 192 .168
5:43
S…
Speaker 1 (2026-04-12 14-35-44)
.1 address.
5:44
S…
Speaker 1 (2026-04-12 14-35-44)
Give that a few packets.
5:46
S…
Speaker 2 (2026-04-12 14-35-44)
I'm going to do just kind of a few different tasks here.
5:49
S…
Speaker 2 (2026-04-12 14-35-44)
And then we're going to kind of look at the information that was
5:53
S…
Speaker 1 (2026-04-12 14-35-44)
captured.
5:54
S…
Speaker 2 (2026-04-12 14-35-44)
Next, I'm going to ping this lab machine.
5:58
S…
Speaker 2 (2026-04-12 14-35-44)
from another machine.
5:59
S…
Speaker 2 (2026-04-12 14-35-44)
So you're not actually seeing anything on the screen here.
6:01
S…
Speaker 1 (2026-04-12 14-35-44)
That is complete.
6:03
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to do a quick lookup,
6:06
S…
Speaker 1 (2026-04-12 14-35-44)
DNS lookup.
6:09
S…
Speaker 1 (2026-04-12 14-35-44)
So we will look up,
6:10
S…
Speaker 1 (2026-04-12 14-35-44)
let's just do google .com.
6:12
S…
Speaker 2 (2026-04-12 14-35-44)
There's that information.
6:13
S…
Speaker 2 (2026-04-12 14-35-44)
And then we're going to do a little bit of web browsing.
6:17
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to start with going to,
6:19
S…
Speaker 1 (2026-04-12 14-35-44)
let's look at never SSL.
6:25
S…
Speaker 2 (2026-04-12 14-35-44)
So get an HTTP site and then
6:29
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to look at a HTTPS
6:33
S…
Speaker 1 (2026-04-12 14-35-44)
site and we are just kind of looking at
6:38
S…
Speaker 2 (2026-04-12 14-35-44)
the information here.
6:39
S…
Speaker 2 (2026-04-12 14-35-44)
So let's switch back over to Wireshark,
6:41
S…
Speaker 2 (2026-04-12 14-35-44)
stop the capture,
6:41
S…
Speaker 2 (2026-04-12 14-35-44)
and we'll see what all we got.
6:44
S…
Speaker 2 (2026-04-12 14-35-44)
And you can see here we got a large amount of information.
6:47
S…
Speaker 2 (2026-04-12 14-35-44)
We have 1 ,065 packets that were captured,
6:52
S…
Speaker 2 (2026-04-12 14-35-44)
as you can see right here at the bottom of the screen.
6:55
S…
Speaker 2 (2026-04-12 14-35-44)
And you can also see that all of them are being displayed
7:00
S…
Speaker 2 (2026-04-12 14-35-44)
as well.
7:01
S…
Speaker 2 (2026-04-12 14-35-44)
So we have no display filter or any other filters in
7:05
S…
Speaker 2 (2026-04-12 14-35-44)
place at the moment.
7:06
S…
Speaker 2 (2026-04-12 14-35-44)
So we see some ARP requests and replies.
7:11
S…
Speaker 2 (2026-04-12 14-35-44)
Scroll down a little bit here.
7:14
S…
Speaker 2 (2026-04-12 14-35-44)
A lot of just general information,
7:16
S…
Speaker 2 (2026-04-12 14-35-44)
and we see our ping requests going to the IP
7:20
S…
Speaker 2 (2026-04-12 14-35-44)
address we ping,
7:21
S…
Speaker 2 (2026-04-12 14-35-44)
the 192 .168 .1 .1,
7:23
S…
Speaker 2 (2026-04-12 14-35-44)
and we see the ping reply,
7:26
S…
Speaker 2 (2026-04-12 14-35-44)
the echo reply here.
7:28
S…
Speaker 2 (2026-04-12 14-35-44)
And we see,
7:29
S…
Speaker 2 (2026-04-12 14-35-44)
since we did a few of them,
7:30
S…
Speaker 2 (2026-04-12 14-35-44)
we see a number of these replies and requests in addition
7:34
S…
Speaker 2 (2026-04-12 14-35-44)
to more ARP requests and replies.
7:38
S…
Speaker 2 (2026-04-12 14-35-44)
Scroll down here.
7:39
S…
Speaker 2 (2026-04-12 14-35-44)
The next thing we did was to ping this system from
7:43
S…
Speaker 2 (2026-04-12 14-35-44)
another one.
7:44
S…
Speaker 2 (2026-04-12 14-35-44)
So we should see that here shortly.
7:47
S…
Speaker 1 (2026-04-12 14-35-44)
Here we go.
7:50
S…
Speaker 2 (2026-04-12 14-35-44)
So we have the source of the IP address.
7:53
S…
Speaker 2 (2026-04-12 14-35-44)
This is the machine I pinged from,
7:54
S…
Speaker 2 (2026-04-12 14-35-44)
pinging the IP address of this machine.
7:57
S…
Speaker 2 (2026-04-12 14-35-44)
So we can see the incoming request followed immediately by
8:02
S…
Speaker 2 (2026-04-12 14-35-44)
the reply here.
8:03
S…
Speaker 1 (2026-04-12 14-35-44)
Now,
8:04
S…
Speaker 2 (2026-04-12 14-35-44)
as far as the Wireshark interface itself,
8:09
S…
Speaker 1 (2026-04-12 14-35-44)
let's scroll down,
8:09
S…
Speaker 2 (2026-04-12 14-35-44)
look for the HTTP packets.
8:12
S…
Speaker 1 (2026-04-12 14-35-44)
Here we go.
8:13
S…
Speaker 2 (2026-04-12 14-35-44)
As far as the Wireshark display itself,
8:16
S…
Speaker 2 (2026-04-12 14-35-44)
we have a lot of information we can display here about the information
8:21
S…
Speaker 2 (2026-04-12 14-35-44)
of the specific packet.
8:23
S…
Speaker 2 (2026-04-12 14-35-44)
We still have the ping reply highlighted,
8:25
S…
Speaker 2 (2026-04-12 14-35-44)
and we can see all that information.
8:27
S…
Speaker 2 (2026-04-12 14-35-44)
We'll get into more detail on these bottom panes as
8:31
S…
Speaker 1 (2026-04-12 14-35-44)
we start looking at the analysis for
8:35
S…
Speaker 2 (2026-04-12 14-35-44)
Wireshark as well.
8:38
S…
Speaker 2 (2026-04-12 14-35-44)
And then we have the kind of raw data of the request on the right
8:42
S…
Speaker 2 (2026-04-12 14-35-44)
-hand side in hex format and in raw format as well.
8:46
S…
Speaker 1 (2026-04-12 14-35-44)
So let's see.
8:47
S…
Speaker 2 (2026-04-12 14-35-44)
We also have the DNS requests we did.
8:51
S…
Speaker 2 (2026-04-12 14-35-44)
So we have the query response for our DNS.
8:53
S…
Speaker 1 (2026-04-12 14-35-44)
We have a few of those.
8:55
S…
Speaker 1 (2026-04-12 14-35-44)
And then we have our HTTP requests
9:00
S…
Speaker 2 (2026-04-12 14-35-44)
as well and HTTPS.
9:05
S…
Speaker 2 (2026-04-12 14-35-44)
So we have some TLS exchanges happening here.
9:09
S…
Speaker 1 (2026-04-12 14-35-44)
Let's see.
9:11
S…
Speaker 1 (2026-04-12 14-35-44)
We have manually sorting through this
9:15
S…
Speaker 2 (2026-04-12 14-35-44)
can be a bit difficult at
9:19
S…
Speaker 2 (2026-04-12 14-35-44)
times, which is where the display filters come in.
9:23
S…
Speaker 1 (2026-04-12 14-35-44)
Again,
9:24
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to get into the display filters more as we go
9:28
S…
Speaker 2 (2026-04-12 14-35-44)
through the course.
9:29
S…
Speaker 2 (2026-04-12 14-35-44)
We see a lot of TLS information here.
9:35
S…
Speaker 1 (2026-04-12 14-35-44)
Let's see a lot of more DNS,
9:37
S…
Speaker 2 (2026-04-12 14-35-44)
some additional TCP exchanges.
9:41
S…
Speaker 1 (2026-04-12 14-35-44)
So you can see there's a lot of information
9:45
S…
Speaker 2 (2026-04-12 14-35-44)
that is captured in just the one simple capture that
9:50
S…
Speaker 2 (2026-04-12 14-35-44)
we did.
9:51
S…
Speaker 2 (2026-04-12 14-35-44)
So let's do a new capture.
9:54
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to close this capture,
9:56
S…
Speaker 2 (2026-04-12 14-35-44)
and we're going to do a new capture,
9:58
S…
Speaker 2 (2026-04-12 14-35-44)
but this time we're going to do it with a capture filter.
10:02
S…
Speaker 2 (2026-04-12 14-35-44)
So the filter we're going to enter,
10:03
S…
Speaker 2 (2026-04-12 14-35-44)
make sure we have our interface selected here,
10:05
S…
Speaker 1 (2026-04-12 14-35-44)
and we do.
10:05
S…
Speaker 2 (2026-04-12 14-35-44)
The filter we're going to enter is we're going to do a filter that only is
10:10
S…
Speaker 2 (2026-04-12 14-35-44)
going to display HTTP traffic.
10:13
S…
Speaker 2 (2026-04-12 14-35-44)
So we do TCP,
10:15
S…
Speaker 2 (2026-04-12 14-35-44)
because that's what HTTP is,
10:16
S…
Speaker 2 (2026-04-12 14-35-44)
port 80.
10:18
S…
Speaker 2 (2026-04-12 14-35-44)
You can also do port HTTP.
10:19
S…
Speaker 2 (2026-04-12 14-35-44)
The key indicator here that if you know
10:24
S…
Speaker 2 (2026-04-12 14-35-44)
you have the filter set up properly is the bar turns
10:28
S…
Speaker 1 (2026-04-12 14-35-44)
green.
10:28
S…
Speaker 2 (2026-04-12 14-35-44)
So if we say removed the port number,
10:31
S…
Speaker 2 (2026-04-12 14-35-44)
we then have a red bar indicator,
10:34
S…
Speaker 2 (2026-04-12 14-35-44)
a red input field,
10:35
S…
Speaker 2 (2026-04-12 14-35-44)
indicating that there is something wrong with this capture filter.
10:38
S…
Speaker 2 (2026-04-12 14-35-44)
It is not the right syntax.
10:40
S…
Speaker 2 (2026-04-12 14-35-44)
Either there's something missing or it's just incorrect completely.
10:43
S…
Speaker 2 (2026-04-12 14-35-44)
But we have the port number again and we're good.
10:46
S…
Speaker 2 (2026-04-12 14-35-44)
So we're going to go ahead and start the capture.
10:49
S…
Speaker 1 (2026-04-12 14-35-44)
And we see no packets flowing through.
10:52
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to do another ping.
10:55
S…
Speaker 1 (2026-04-12 14-35-44)
I'm going to leave that ping running.
10:58
S…
Speaker 1 (2026-04-12 14-35-44)
And we see we have absolutely no information being displayed
11:03
S…
Speaker 2 (2026-04-12 14-35-44)
in Wireshark because it does not match the filter,
11:06
S…
Speaker 2 (2026-04-12 14-35-44)
the capture filter we have set up.
11:09
S…
Speaker 2 (2026-04-12 14-35-44)
So we'll come back over here.
11:11
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to just refresh this page right here,
11:14
S…
Speaker 2 (2026-04-12 14-35-44)
and this is an HTTPS site.
11:17
S…
Speaker 2 (2026-04-12 14-35-44)
Refreshed it,
11:18
S…
Speaker 2 (2026-04-12 14-35-44)
and we have zero information being displayed as well.
11:21
S…
Speaker 2 (2026-04-12 14-35-44)
No packets recorded in Wireshark because,
11:24
S…
Speaker 2 (2026-04-12 14-35-44)
again, it does not match the capture filter.
11:27
S…
Speaker 1 (2026-04-12 14-35-44)
However,
11:29
S…
Speaker 2 (2026-04-12 14-35-44)
if we connect back to NeverSSL here,
11:31
S…
Speaker 1 (2026-04-12 14-35-44)
which,
11:32
S…
Speaker 2 (2026-04-12 14-35-44)
as the name implies,
11:33
S…
Speaker 2 (2026-04-12 14-35-44)
does not use SSL,
11:36
S…
Speaker 2 (2026-04-12 14-35-44)
We then see a lot of HTTP information.
11:40
S…
Speaker 2 (2026-04-12 14-35-44)
Come back over here and stop the packets.
11:42
S…
Speaker 2 (2026-04-12 14-35-44)
We see a lot of information.
11:45
S…
Speaker 2 (2026-04-12 14-35-44)
We see the TCP coming out from our machine to the destination
11:49
S…
Speaker 2 (2026-04-12 14-35-44)
machine on port 80 right here.
11:52
S…
Speaker 2 (2026-04-12 14-35-44)
We see HTTP looks like a redirect right there.
11:56
S…
Speaker 2 (2026-04-12 14-35-44)
We see that we're trying to get different files.
12:00
S…
Speaker 2 (2026-04-12 14-35-44)
getting some icons.
12:02
S…
Speaker 2 (2026-04-12 14-35-44)
We see the HTTP traffic,
12:05
S…
Speaker 2 (2026-04-12 14-35-44)
but no other traffic is recorded,
12:08
S…
Speaker 2 (2026-04-12 14-35-44)
and that's what the capture filter is meant to do.
12:13
S…
Speaker 2 (2026-04-12 14-35-44)
So capturing information on or using Wireshark
12:17
S…
Speaker 2 (2026-04-12 14-35-44)
is you know a fairly simple task
12:22
S…
Speaker 2 (2026-04-12 14-35-44)
to perform.
12:24
S…
Speaker 2 (2026-04-12 14-35-44)
There's not a whole lot to it.
12:26
S…
Speaker 2 (2026-04-12 14-35-44)
You're either using a capture filter or you're not using a capture filter and
12:30
S…
Speaker 2 (2026-04-12 14-35-44)
that's going to affect the information that is actually saved and displayed in
12:34
S…
Speaker 2 (2026-04-12 14-35-44)
Wireshark.
12:35
S…
Speaker 2 (2026-04-12 14-35-44)
separate from a display filter,
12:37
S…
Speaker 2 (2026-04-12 14-35-44)
and you're making sure you have the correct interface selected.
12:41
S…
Speaker 2 (2026-04-12 14-35-44)
Again, as we go forward with this course,
12:43
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to take a look at more features with Wireshark and other applications
12:48
S…
Speaker 2 (2026-04-12 14-35-44)
as far as performing analysis with various different
12:53
S…
Speaker 2 (2026-04-12 14-35-44)
types of traffic as well.
Haec transcriptio a AI (recognitione automatica loci) generata est. Errores continere potest - contra audio originalem verificare ut criticum utentur. Politicae
Summa
Haec pagina de scriptura explicat, quae ad scripturam translativam pertinet.
Summa...
De hoc translatio scripsit.
Quod ad hoc adscriptum est, quod ad hoc adscriptum est, et adscriptum est.