Itc Wireshark

718 views
670 views

Published on

Wireshark ITC presentation.

Published in: Technology
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
718
On SlideShare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
34
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Itc Wireshark

  1. 1. NEA-SEA ITC 2009 Wireshark March 2009 ITC Jay Hall
  2. 2. What is Wireshark? <ul><li>Wireshark is a </li></ul><ul><ul><li>free </li></ul></ul><ul><ul><li>packet sniffer </li></ul></ul><ul><ul><li>used for network troubleshooting and analysis. </li></ul></ul><ul><li>Wireshark was previously know as Ethereal. </li></ul>
  3. 3. Setup <ul><li>Switch ports must be “mirrored” to a single port so monitoring can take place. </li></ul><ul><li>All packets are forwarded to a single switch port and are captured by Wireshark </li></ul><ul><ul><li>This is called “Promiscuous Sniffing”. </li></ul></ul><ul><ul><ul><li>This is not something dogs do. </li></ul></ul></ul>
  4. 4. A Word of Caution <ul><li>Servers which have ip forwarding enabled should probably not be used to capture packets. </li></ul><ul><li>Recently, I used a server with ip forwarding enabled to capture packets. </li></ul><ul><ul><li>Server the server was seeing all of the packets on the network it was forwarding packets back to the network which were not destined for the server. </li></ul></ul><ul><ul><li>The good news is Wireshark caught it all. </li></ul></ul>
  5. 5. Wireshark Log Files Wireshark Demo
  6. 6. Questions ???????????????
  7. 7. The End

×