Wireshark is a free and open-source packet analyzer that allows users to examine network traffic and capture packet data that transmits across a network. It can operate on Windows, Linux, OS X, and other platforms. Wireshark has a user-friendly interface and can decode protocols like ASCII and HEX. It displays captured network frames along with packet details at each layer of the TCP/IP model. While useful for network analysis, Wireshark can also be used to launch attacks by capturing sensitive information, usernames, and passwords transmitted over the network.

1. Wireshark

2. What is Wireshark
• Wireshark is a free and open source packet
analyzer.
• A protocol analyzer, such as Wireshark, is used to
copy frames off of an active network
• These frames are like the cars on the highway
• By capturing and examining these frames we can
see exactly what is happening on the network

3. Why Wireshark
• What I liked about it!
• Multi-platform: Windows, Linux, OS X, Solaris,
FreeBSD, NetBSD.
• It has a user friendly interface (GUI)
• Colo-ring
• And most importantly its ability to decode
most of the algorithms namely ASCII,HEX

4. Installing
• Quite easy just download the setup from
www.wireshark.org

5. The Start screen

6. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
Wireshark
6
The frames
that were
captured
The layers in the
currently
selected frame
The contents of the
current layer in hex
and ASCII

7. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
TCP/IP Model
7

8. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
The Layers
8
The frame
shown in
detail below
All the layers in
this frame
The contents
of the
selected layer
The contents in hex
The contents in
ASCII

9. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
The Data Link Layer
9

10. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
The Network Layer
10

11. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
The Transport Layer
11

12. Copyright 2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com
The Application Layer
12

13. How wireshark can be used to launch an
attack ?
1-Capturing sensitive or personal information
2-Capturing usernames and passwords
(Which will be shown in the demo )

14. Demo ,,

15. Recourses
http://www.wireshark.org
2007-2010 Kenneth M. Chipps Ph.D.
www.chipps.com