Protocol – Protocol name used in the packet.Destination – Destination address of the packet, could be an IP or MAC address.As humans, we find it easier when the IP or MAC address is an actual name, such as 'or 'You can enable Wireshark's option to convert these addresses by going to 'View > Name Resolution > Resolve Network Addresses'.

Source – Source address of the packet, could be an IP or MAC address.

You can change this to various other time formats by going to 'View > Time Display Format >.

a.k.a how much time passed since you began capturing.

Right below the toolbar, there are seven columns: Here's a look at what the buttons on the toolbar do. When you begin capturing network packets, the following window will show up. Sometimes, packets bounce of various hosts asking for a final destination - at this point, Wireshark keeps the packet or discards based on this option. Promiscious Mode enabled means if a packet is not meant for your system, Wireshark will still keep a record of it. Once selected, press Capture.Īfter you click capture, the following display shows up confirming your selection and offers a few more configurations.

To capture more than one interface, simply hold the 'command' key (for Mac) and then select.

'awdl0' is for my bluetooth chip and 'Loopback: lo0' is for my local server.

A wired interface would be the built-in Thunderbolt ports I have. 'All Interfaces shown' drop down menu allows you to select between Wired, Wireless and External interfaces.

The 'Capture' button begins the network capture.Wireshark captures network information from the Application Layer to the Link Layer. software and communications protocol development,.Wireshark Overview Wireshark is a network protocol analyzer created by Gerald Combs in 1998.

Https wireshark