2026-04-12 14-35-44
May 25, 2026 13:44
· 13:03
· English
· Whisper Turbo
· 2 Folës
Kjo transkriptë skadon sot.
Përmirëso për ruajtje të përhershme →
Shfaq vetëm
0:05
S…
Speaker 1 (2026-04-12 14-35-44)
Wireshark is one of the most popular and
0:09
S…
Speaker 1 (2026-04-12 14-35-44)
most widely used applications when it comes to capturing
0:14
S…
Speaker 1 (2026-04-12 14-35-44)
packets and performing packet analysis.
0:17
S…
Speaker 1 (2026-04-12 14-35-44)
So in this video,
0:19
S…
Speaker 1 (2026-04-12 14-35-44)
we're going to take a look at some of the capturing
0:23
S…
Speaker 1 (2026-04-12 14-35-44)
abilities within Wireshark and what those packets look
0:27
S…
Speaker 1 (2026-04-12 14-35-44)
like.
0:28
S…
Speaker 1 (2026-04-12 14-35-44)
Before we get into it,
0:30
S…
Speaker 1 (2026-04-12 14-35-44)
just a couple of quick notes about Wireshark.
0:33
S…
Speaker 1 (2026-04-12 14-35-44)
First of all, when we're talking about capturing packets,
0:36
S…
Speaker 1 (2026-04-12 14-35-44)
it's only going to be able to capture packets that are communicating
0:41
S…
Speaker 1 (2026-04-12 14-35-44)
with the machine Wireshark is installed on,
0:44
S…
Speaker 1 (2026-04-12 14-35-44)
either as the source
0:45
S…
Speaker 1 (2026-04-12 14-35-44)
or the destination when we're talking about capturing packets.
0:48
S…
Speaker 1 (2026-04-12 14-35-44)
Of course, with analysis,
0:50
S…
Speaker 1 (2026-04-12 14-35-44)
if we're looking at a previously captured file,
0:55
S…
Speaker 1 (2026-04-12 14-35-44)
a PCAP file,
0:55
S…
Speaker 1 (2026-04-12 14-35-44)
or any other format of packet capture file,
0:58
S…
Speaker 1 (2026-04-12 14-35-44)
we can examine packets from any computer.
1:01
S…
Speaker 1 (2026-04-12 14-35-44)
It doesn't matter which one they came from as long as they were
1:05
S…
Speaker 1 (2026-04-12 14-35-44)
properly captured.
1:06
S…
Speaker 1 (2026-04-12 14-35-44)
It only applies to the analysis for the current
1:11
S…
Speaker 1 (2026-04-12 14-35-44)
live machine.
1:13
S…
Speaker 1 (2026-04-12 14-35-44)
Wireshark has a number of ways to kind of filter out data
1:17
S…
Speaker 1 (2026-04-12 14-35-44)
that is both captured and displayed using different
1:21
S…
Speaker 1 (2026-04-12 14-35-44)
syntax for each.
1:23
S…
Speaker 1 (2026-04-12 14-35-44)
For capture filter or for capturing packets,
1:27
S…
Speaker 1 (2026-04-12 14-35-44)
you have what you're called your capture filters,
1:29
S…
Speaker 1 (2026-04-12 14-35-44)
very appropriate name.
1:31
S…
Speaker 1 (2026-04-12 14-35-44)
And they are designed to limit the amount of data that
1:35
S…
Speaker 1 (2026-04-12 14-35-44)
is captured and saved using Wireshark.
1:38
S…
Speaker 1 (2026-04-12 14-35-44)
This is a live filter and it does affect what
1:43
S…
Speaker 1 (2026-04-12 14-35-44)
information is actually saved or analyzed by a Wireshark
1:47
S…
Speaker 1 (2026-04-12 14-35-44)
and what can be saved into a PCAP file.
1:51
S…
Speaker 1 (2026-04-12 14-35-44)
The benefit for capture filters is that it does reduce
1:56
S…
Speaker 1 (2026-04-12 14-35-44)
the processing requirements for Wireshark and makes it easier to
2:00
S…
Speaker 1 (2026-04-12 14-35-44)
run on a lower end machine,
2:02
S…
Speaker 1 (2026-04-12 14-35-44)
and it also can help reduce the size of the file
2:07
S…
Speaker 1 (2026-04-12 14-35-44)
that is that is saved after the capture is complete.
2:10
S…
Speaker 1 (2026-04-12 14-35-44)
Now you do have the side effect there of
2:14
S…
Speaker 1 (2026-04-12 14-35-44)
If the traffic that is on the machine is
2:18
S…
Speaker 1 (2026-04-12 14-35-44)
not included in that capture file,
2:20
S…
Speaker 1 (2026-04-12 14-35-44)
it is not going to be seen by Wireshark.
2:22
S…
Speaker 1 (2026-04-12 14-35-44)
It is not going to be saved in the PCAP.
2:25
S…
Speaker 1 (2026-04-12 14-35-44)
So something to keep in mind when you are working with
2:29
S…
Speaker 1 (2026-04-12 14-35-44)
capture filters.
2:31
S…
Speaker 1 (2026-04-12 14-35-44)
And you also have display filters.
2:33
S…
Speaker 1 (2026-04-12 14-35-44)
These can be used either while capturing or they can be used
2:38
S…
Speaker 1 (2026-04-12 14-35-44)
during the packet analysis phase,
2:41
S…
Speaker 1 (2026-04-12 14-35-44)
either immediately after a packet capture or while you're capturing
2:45
S…
Speaker 1 (2026-04-12 14-35-44)
packets or from a previously saved capture
2:50
S…
Speaker 1 (2026-04-12 14-35-44)
session.
2:51
S…
Speaker 1 (2026-04-12 14-35-44)
Display filters don't reduce any of the processing overhead
2:55
S…
Speaker 1 (2026-04-12 14-35-44)
for Wireshark.
2:56
S…
Speaker 1 (2026-04-12 14-35-44)
They don't affect the information that is in.
2:59
S…
Speaker 1 (2026-04-12 14-35-44)
the capture or anything like that.
3:01
S…
Speaker 1 (2026-04-12 14-35-44)
They are only kind of filtering out the information
3:05
S…
Speaker 1 (2026-04-12 14-35-44)
that is shown to you,
3:07
S…
Speaker 1 (2026-04-12 14-35-44)
as the name implies,
3:08
S…
Speaker 1 (2026-04-12 14-35-44)
with a display filter.
3:11
S…
Speaker 1 (2026-04-12 14-35-44)
Now from the analysis component of Wireshark,
3:15
S…
Speaker 1 (2026-04-12 14-35-44)
you have what is known as a feature called follow stream.
3:19
S…
Speaker 1 (2026-04-12 14-35-44)
Now this is a feature that makes it a lot easier
3:24
S…
Speaker 1 (2026-04-12 14-35-44)
to analyze information that Wireshark has captured.
3:27
S…
Speaker 1 (2026-04-12 14-35-44)
Basically,
3:28
S…
Speaker 1 (2026-04-12 14-35-44)
and we'll take a look at this in more detail when we get into the video for analysis
3:32
S…
Speaker 1 (2026-04-12 14-35-44)
using Wireshark.
3:34
S…
Speaker 1 (2026-04-12 14-35-44)
But essentially, you are able to pick a specific packet from the list
3:38
S…
Speaker 1 (2026-04-12 14-35-44)
of packets and select that one to follow
3:42
S…
Speaker 1 (2026-04-12 14-35-44)
the stream.
3:43
S…
Speaker 1 (2026-04-12 14-35-44)
And it will follow that exact either TCP or UDP
3:47
S…
Speaker 1 (2026-04-12 14-35-44)
path or whatever it is,
3:48
S…
Speaker 1 (2026-04-12 14-35-44)
that communication path,
3:49
S…
Speaker 1 (2026-04-12 14-35-44)
and only show data from that specific stream.
3:54
S…
Speaker 1 (2026-04-12 14-35-44)
which helps filter out a lot of the additional information that
3:58
S…
Speaker 1 (2026-04-12 14-35-44)
you may not really,
3:59
S…
Speaker 1 (2026-04-12 14-35-44)
really care about at that moment.
4:02
S…
Speaker 1 (2026-04-12 14-35-44)
Now, it doesn't remove it from the capture.
4:04
S…
Speaker 1 (2026-04-12 14-35-44)
It does not remove it from a previously captured
4:08
S…
Speaker 1 (2026-04-12 14-35-44)
file or anything like that.
4:10
S…
Speaker 1 (2026-04-12 14-35-44)
FollowStream is a type of display filter,
4:14
S…
Speaker 1 (2026-04-12 14-35-44)
and we'll see how this works again later on
4:18
S…
Speaker 1 (2026-04-12 14-35-44)
when we start looking at analysis with Wireshark.
4:22
S…
Speaker 1 (2026-04-12 14-35-44)
So let's go ahead and switch over to our lab environment,
4:25
S…
Speaker 1 (2026-04-12 14-35-44)
and we're going to take a look at how the capture process works in Wireshark.
4:31
S…
Speaker 1 (2026-04-12 14-35-44)
Alright, so here in our lab environment,
4:33
S…
Speaker 1 (2026-04-12 14-35-44)
we have the Wireshark.
4:36
S…
Speaker 1 (2026-04-12 14-35-44)
This is the kind of screen you see when you first launch Wireshark.
4:40
S…
Speaker 1 (2026-04-12 14-35-44)
This is the capture screen.
4:42
S…
Speaker 1 (2026-04-12 14-35-44)
So the options we see here,
4:45
S…
Speaker 1 (2026-04-12 14-35-44)
we see various interfaces that can be used as
4:49
S…
Speaker 1 (2026-04-12 14-35-44)
the capture.
4:49
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to focus on the ETH01 right here.
4:53
S…
Speaker 1 (2026-04-12 14-35-44)
We see a section here to enter a filter for
4:57
S…
Speaker 1 (2026-04-12 14-35-44)
the capture.
4:57
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to leave this blank as the initial capture.
5:00
S…
Speaker 2 (2026-04-12 14-35-44)
capture we do,
5:00
S…
Speaker 2 (2026-04-12 14-35-44)
and then we see when we can enter the display filters as
5:04
S…
Speaker 1 (2026-04-12 14-35-44)
well.
5:05
S…
Speaker 2 (2026-04-12 14-35-44)
So the toolbar up here,
5:07
S…
Speaker 2 (2026-04-12 14-35-44)
you have the option to start the capture,
5:09
S…
Speaker 2 (2026-04-12 14-35-44)
stop the capture,
5:10
S…
Speaker 2 (2026-04-12 14-35-44)
here's a restart,
5:11
S…
Speaker 2 (2026-04-12 14-35-44)
open a previous capture file,
5:14
S…
Speaker 2 (2026-04-12 14-35-44)
and so forth.
5:15
S…
Speaker 2 (2026-04-12 14-35-44)
So what we're going to do is we're going to start out on each zero.
5:18
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to use no capture filter,
5:20
S…
Speaker 2 (2026-04-12 14-35-44)
so it'll capture all packets,
5:22
S…
Speaker 2 (2026-04-12 14-35-44)
and we're going to go ahead and start the capture and see what we get.
5:25
S…
Speaker 2 (2026-04-12 14-35-44)
We see we get a lot of requests and replies.
5:29
S…
Speaker 2 (2026-04-12 14-35-44)
And we're going to take a look at a few tasks
5:33
S…
Speaker 2 (2026-04-12 14-35-44)
on this machine.
5:35
S…
Speaker 2 (2026-04-12 14-35-44)
Starting with,
5:35
S…
Speaker 2 (2026-04-12 14-35-44)
we are going to ping another machine.
5:39
S…
Speaker 1 (2026-04-12 14-35-44)
We are going to ping this 192 .168
5:43
S…
Speaker 1 (2026-04-12 14-35-44)
.1 address.
5:44
S…
Speaker 1 (2026-04-12 14-35-44)
Give that a few packets.
5:46
S…
Speaker 2 (2026-04-12 14-35-44)
I'm going to do just kind of a few different tasks here.
5:49
S…
Speaker 2 (2026-04-12 14-35-44)
And then we're going to kind of look at the information that was
5:53
S…
Speaker 1 (2026-04-12 14-35-44)
captured.
5:54
S…
Speaker 2 (2026-04-12 14-35-44)
Next, I'm going to ping this lab machine.
5:58
S…
Speaker 2 (2026-04-12 14-35-44)
from another machine.
5:59
S…
Speaker 2 (2026-04-12 14-35-44)
So you're not actually seeing anything on the screen here.
6:01
S…
Speaker 1 (2026-04-12 14-35-44)
That is complete.
6:03
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to do a quick lookup,
6:06
S…
Speaker 1 (2026-04-12 14-35-44)
DNS lookup.
6:09
S…
Speaker 1 (2026-04-12 14-35-44)
So we will look up,
6:10
S…
Speaker 1 (2026-04-12 14-35-44)
let's just do google .com.
6:12
S…
Speaker 2 (2026-04-12 14-35-44)
There's that information.
6:13
S…
Speaker 2 (2026-04-12 14-35-44)
And then we're going to do a little bit of web browsing.
6:17
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to start with going to,
6:19
S…
Speaker 1 (2026-04-12 14-35-44)
let's look at never SSL.
6:25
S…
Speaker 2 (2026-04-12 14-35-44)
So get an HTTP site and then
6:29
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to look at a HTTPS
6:33
S…
Speaker 1 (2026-04-12 14-35-44)
site and we are just kind of looking at
6:38
S…
Speaker 2 (2026-04-12 14-35-44)
the information here.
6:39
S…
Speaker 2 (2026-04-12 14-35-44)
So let's switch back over to Wireshark,
6:41
S…
Speaker 2 (2026-04-12 14-35-44)
stop the capture,
6:41
S…
Speaker 2 (2026-04-12 14-35-44)
and we'll see what all we got.
6:44
S…
Speaker 2 (2026-04-12 14-35-44)
And you can see here we got a large amount of information.
6:47
S…
Speaker 2 (2026-04-12 14-35-44)
We have 1 ,065 packets that were captured,
6:52
S…
Speaker 2 (2026-04-12 14-35-44)
as you can see right here at the bottom of the screen.
6:55
S…
Speaker 2 (2026-04-12 14-35-44)
And you can also see that all of them are being displayed
7:00
S…
Speaker 2 (2026-04-12 14-35-44)
as well.
7:01
S…
Speaker 2 (2026-04-12 14-35-44)
So we have no display filter or any other filters in
7:05
S…
Speaker 2 (2026-04-12 14-35-44)
place at the moment.
7:06
S…
Speaker 2 (2026-04-12 14-35-44)
So we see some ARP requests and replies.
7:11
S…
Speaker 2 (2026-04-12 14-35-44)
Scroll down a little bit here.
7:14
S…
Speaker 2 (2026-04-12 14-35-44)
A lot of just general information,
7:16
S…
Speaker 2 (2026-04-12 14-35-44)
and we see our ping requests going to the IP
7:20
S…
Speaker 2 (2026-04-12 14-35-44)
address we ping,
7:21
S…
Speaker 2 (2026-04-12 14-35-44)
the 192 .168 .1 .1,
7:23
S…
Speaker 2 (2026-04-12 14-35-44)
and we see the ping reply,
7:26
S…
Speaker 2 (2026-04-12 14-35-44)
the echo reply here.
7:28
S…
Speaker 2 (2026-04-12 14-35-44)
And we see,
7:29
S…
Speaker 2 (2026-04-12 14-35-44)
since we did a few of them,
7:30
S…
Speaker 2 (2026-04-12 14-35-44)
we see a number of these replies and requests in addition
7:34
S…
Speaker 2 (2026-04-12 14-35-44)
to more ARP requests and replies.
7:38
S…
Speaker 2 (2026-04-12 14-35-44)
Scroll down here.
7:39
S…
Speaker 2 (2026-04-12 14-35-44)
The next thing we did was to ping this system from
7:43
S…
Speaker 2 (2026-04-12 14-35-44)
another one.
7:44
S…
Speaker 2 (2026-04-12 14-35-44)
So we should see that here shortly.
7:47
S…
Speaker 1 (2026-04-12 14-35-44)
Here we go.
7:50
S…
Speaker 2 (2026-04-12 14-35-44)
So we have the source of the IP address.
7:53
S…
Speaker 2 (2026-04-12 14-35-44)
This is the machine I pinged from,
7:54
S…
Speaker 2 (2026-04-12 14-35-44)
pinging the IP address of this machine.
7:57
S…
Speaker 2 (2026-04-12 14-35-44)
So we can see the incoming request followed immediately by
8:02
S…
Speaker 2 (2026-04-12 14-35-44)
the reply here.
8:03
S…
Speaker 1 (2026-04-12 14-35-44)
Now,
8:04
S…
Speaker 2 (2026-04-12 14-35-44)
as far as the Wireshark interface itself,
8:09
S…
Speaker 1 (2026-04-12 14-35-44)
let's scroll down,
8:09
S…
Speaker 2 (2026-04-12 14-35-44)
look for the HTTP packets.
8:12
S…
Speaker 1 (2026-04-12 14-35-44)
Here we go.
8:13
S…
Speaker 2 (2026-04-12 14-35-44)
As far as the Wireshark display itself,
8:16
S…
Speaker 2 (2026-04-12 14-35-44)
we have a lot of information we can display here about the information
8:21
S…
Speaker 2 (2026-04-12 14-35-44)
of the specific packet.
8:23
S…
Speaker 2 (2026-04-12 14-35-44)
We still have the ping reply highlighted,
8:25
S…
Speaker 2 (2026-04-12 14-35-44)
and we can see all that information.
8:27
S…
Speaker 2 (2026-04-12 14-35-44)
We'll get into more detail on these bottom panes as
8:31
S…
Speaker 1 (2026-04-12 14-35-44)
we start looking at the analysis for
8:35
S…
Speaker 2 (2026-04-12 14-35-44)
Wireshark as well.
8:38
S…
Speaker 2 (2026-04-12 14-35-44)
And then we have the kind of raw data of the request on the right
8:42
S…
Speaker 2 (2026-04-12 14-35-44)
-hand side in hex format and in raw format as well.
8:46
S…
Speaker 1 (2026-04-12 14-35-44)
So let's see.
8:47
S…
Speaker 2 (2026-04-12 14-35-44)
We also have the DNS requests we did.
8:51
S…
Speaker 2 (2026-04-12 14-35-44)
So we have the query response for our DNS.
8:53
S…
Speaker 1 (2026-04-12 14-35-44)
We have a few of those.
8:55
S…
Speaker 1 (2026-04-12 14-35-44)
And then we have our HTTP requests
9:00
S…
Speaker 2 (2026-04-12 14-35-44)
as well and HTTPS.
9:05
S…
Speaker 2 (2026-04-12 14-35-44)
So we have some TLS exchanges happening here.
9:09
S…
Speaker 1 (2026-04-12 14-35-44)
Let's see.
9:11
S…
Speaker 1 (2026-04-12 14-35-44)
We have manually sorting through this
9:15
S…
Speaker 2 (2026-04-12 14-35-44)
can be a bit difficult at
9:19
S…
Speaker 2 (2026-04-12 14-35-44)
times, which is where the display filters come in.
9:23
S…
Speaker 1 (2026-04-12 14-35-44)
Again,
9:24
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to get into the display filters more as we go
9:28
S…
Speaker 2 (2026-04-12 14-35-44)
through the course.
9:29
S…
Speaker 2 (2026-04-12 14-35-44)
We see a lot of TLS information here.
9:35
S…
Speaker 1 (2026-04-12 14-35-44)
Let's see a lot of more DNS,
9:37
S…
Speaker 2 (2026-04-12 14-35-44)
some additional TCP exchanges.
9:41
S…
Speaker 1 (2026-04-12 14-35-44)
So you can see there's a lot of information
9:45
S…
Speaker 2 (2026-04-12 14-35-44)
that is captured in just the one simple capture that
9:50
S…
Speaker 2 (2026-04-12 14-35-44)
we did.
9:51
S…
Speaker 2 (2026-04-12 14-35-44)
So let's do a new capture.
9:54
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to close this capture,
9:56
S…
Speaker 2 (2026-04-12 14-35-44)
and we're going to do a new capture,
9:58
S…
Speaker 2 (2026-04-12 14-35-44)
but this time we're going to do it with a capture filter.
10:02
S…
Speaker 2 (2026-04-12 14-35-44)
So the filter we're going to enter,
10:03
S…
Speaker 2 (2026-04-12 14-35-44)
make sure we have our interface selected here,
10:05
S…
Speaker 1 (2026-04-12 14-35-44)
and we do.
10:05
S…
Speaker 2 (2026-04-12 14-35-44)
The filter we're going to enter is we're going to do a filter that only is
10:10
S…
Speaker 2 (2026-04-12 14-35-44)
going to display HTTP traffic.
10:13
S…
Speaker 2 (2026-04-12 14-35-44)
So we do TCP,
10:15
S…
Speaker 2 (2026-04-12 14-35-44)
because that's what HTTP is,
10:16
S…
Speaker 2 (2026-04-12 14-35-44)
port 80.
10:18
S…
Speaker 2 (2026-04-12 14-35-44)
You can also do port HTTP.
10:19
S…
Speaker 2 (2026-04-12 14-35-44)
The key indicator here that if you know
10:24
S…
Speaker 2 (2026-04-12 14-35-44)
you have the filter set up properly is the bar turns
10:28
S…
Speaker 1 (2026-04-12 14-35-44)
green.
10:28
S…
Speaker 2 (2026-04-12 14-35-44)
So if we say removed the port number,
10:31
S…
Speaker 2 (2026-04-12 14-35-44)
we then have a red bar indicator,
10:34
S…
Speaker 2 (2026-04-12 14-35-44)
a red input field,
10:35
S…
Speaker 2 (2026-04-12 14-35-44)
indicating that there is something wrong with this capture filter.
10:38
S…
Speaker 2 (2026-04-12 14-35-44)
It is not the right syntax.
10:40
S…
Speaker 2 (2026-04-12 14-35-44)
Either there's something missing or it's just incorrect completely.
10:43
S…
Speaker 2 (2026-04-12 14-35-44)
But we have the port number again and we're good.
10:46
S…
Speaker 2 (2026-04-12 14-35-44)
So we're going to go ahead and start the capture.
10:49
S…
Speaker 1 (2026-04-12 14-35-44)
And we see no packets flowing through.
10:52
S…
Speaker 2 (2026-04-12 14-35-44)
We're going to do another ping.
10:55
S…
Speaker 1 (2026-04-12 14-35-44)
I'm going to leave that ping running.
10:58
S…
Speaker 1 (2026-04-12 14-35-44)
And we see we have absolutely no information being displayed
11:03
S…
Speaker 2 (2026-04-12 14-35-44)
in Wireshark because it does not match the filter,
11:06
S…
Speaker 2 (2026-04-12 14-35-44)
the capture filter we have set up.
11:09
S…
Speaker 2 (2026-04-12 14-35-44)
So we'll come back over here.
11:11
S…
Speaker 1 (2026-04-12 14-35-44)
We're going to just refresh this page right here,
11:14
S…
Speaker 2 (2026-04-12 14-35-44)
and this is an HTTPS site.
11:17
S…
Speaker 2 (2026-04-12 14-35-44)
Refreshed it,
11:18
S…
Speaker 2 (2026-04-12 14-35-44)
and we have zero information being displayed as well.
11:21
S…
Speaker 2 (2026-04-12 14-35-44)
No packets recorded in Wireshark because,
11:24
S…
Speaker 2 (2026-04-12 14-35-44)
again, it does not match the capture filter.
11:27
S…
Speaker 1 (2026-04-12 14-35-44)
However,
11:29
S…
Speaker 2 (2026-04-12 14-35-44)
if we connect back to NeverSSL here,
11:31
S…
Speaker 1 (2026-04-12 14-35-44)
which,
11:32
S…
Speaker 2 (2026-04-12 14-35-44)
as the name implies,
11:33
S…
Speaker 2 (2026-04-12 14-35-44)
does not use SSL,
11:36
S…
Speaker 2 (2026-04-12 14-35-44)
We then see a lot of HTTP information.
11:40
S…
Speaker 2 (2026-04-12 14-35-44)
Come back over here and stop the packets.
11:42
S…
Speaker 2 (2026-04-12 14-35-44)
We see a lot of information.
11:45
S…
Speaker 2 (2026-04-12 14-35-44)
We see the TCP coming out from our machine to the destination
11:49
S…
Speaker 2 (2026-04-12 14-35-44)
machine on port 80 right here.
11:52
S…
Speaker 2 (2026-04-12 14-35-44)
We see HTTP looks like a redirect right there.
11:56
S…
Speaker 2 (2026-04-12 14-35-44)
We see that we're trying to get different files.
12:00
S…
Speaker 2 (2026-04-12 14-35-44)
getting some icons.
12:02
S…
Speaker 2 (2026-04-12 14-35-44)
We see the HTTP traffic,
12:05
S…
Speaker 2 (2026-04-12 14-35-44)
but no other traffic is recorded,
12:08
S…
Speaker 2 (2026-04-12 14-35-44)
and that's what the capture filter is meant to do.
12:13
S…
Speaker 2 (2026-04-12 14-35-44)
So capturing information on or using Wireshark
12:17
S…
Speaker 2 (2026-04-12 14-35-44)
is you know a fairly simple task
12:22
S…
Speaker 2 (2026-04-12 14-35-44)
to perform.
12:24
S…
Speaker 2 (2026-04-12 14-35-44)
There's not a whole lot to it.
12:26
S…
Speaker 2 (2026-04-12 14-35-44)
You're either using a capture filter or you're not using a capture filter and
12:30
S…
Speaker 2 (2026-04-12 14-35-44)
that's going to affect the information that is actually saved and displayed in
12:34
S…
Speaker 2 (2026-04-12 14-35-44)
Wireshark.
12:35
S…
Speaker 2 (2026-04-12 14-35-44)
separate from a display filter,
12:37
S…
Speaker 2 (2026-04-12 14-35-44)
and you're making sure you have the correct interface selected.
12:41
S…
Speaker 2 (2026-04-12 14-35-44)
Again, as we go forward with this course,
12:43
S…
Speaker 2 (2026-04-12 14-35-44)
we're going to take a look at more features with Wireshark and other applications
12:48
S…
Speaker 2 (2026-04-12 14-35-44)
as far as performing analysis with various different
12:53
S…
Speaker 2 (2026-04-12 14-35-44)
types of traffic as well.
Kjo transkriptë është krijuar nga AI (njohje automatike e fjalimit). Mund të përmbajë gabime - verifiko me audion origjinale për përdorim kritik. Politika e AI
Përmbledhja
Kliko Përmbledhja për të gjeneruar një përmbledhje të AI të kësaj transkripte.
Përmbledhja...
Pyet AI rreth kësaj transkripte
Pyet gjithçka rreth kësaj transkripte — AI do të gjejë pjesët e duhura dhe do të përgjigjet.