|
|
|
Wireshark is software that "understands" the structure (encapsulation ) of different networking protocols. It can parse and display the fields, along with their meanings as specified by different networking protocols. Wireshark uses pcap to capture packets, so it can only capture packets on the types of networks that pcap supports. |
|
|
|
|
|
|
|
|
|
|
|
Author |
Post time 17-5-2014 09:43 AM
From the mobile phone
|
Show all posts
-Data can be captured "from the wire" from a live network connection or read from a file of already- captured packets.
-Live data can be read from a number of types of network, including Ethernet, IEEE 802.11 , PPP , and loopback.
-Captured network data can be browsed via a GUI , or via the terminal ( command line ) version of the utility, TShark.
-Captured files can be programmatically edited or converted via command-line switches to the "editcap" program.
-Data display can be refined using a display filter. Plug-ins can be created for dissecting new protocols.
-VoIP calls in the captured traffic can be detected. If encoded in a compatible encoding, the media flow can even be played.
-Raw USB traffic can be captured.
Last edited by rdzaccess on 17-5-2014 09:45 AM
|
|
|
|
|
|
|
|
|
|
|
|
Author |
Post time 17-5-2014 09:47 AM
From the mobile phone
|
Show all posts
|
|
|
|
|
|
|
|
|
|
|
tak paham.
sebenarnya wireshark capture apa?
real time data kan.
adakah dia capture structure sekali, maksudnye header dan sume bagai? |
|
|
|
|
|
|
|
|
|
| |
|
Post time 17-5-2014 09:41 AM
变色卡
