Do you have promiscuous mode supported? If you do, this will allow your device to collect packets that are not originally intended for your device.

The process of analysis in Wireshark represents monitoring of different protocols and data inside a network.īefore we start with the process of analysis, make sure you know the type of traffic you are looking to analyze, and various types of devices that emit traffic: HTTP with Secure Sockets Layer – HTTPS (HTTP over SSL/TLS) If you want to learn about the most common ones, check out the following list: Port numberĭynamic Host Configuration Protocol – DHCP Different ports are used for different protocols.

And public ports are ports from 49152-65535, they can be used by any service. Then, from 1024 to 49151 are registered ports – they are assigned by ICANN to a specific service. They can be divided into three different categories: ports from 0 – 1023 are well-known ports, and they are assigned to common services and protocols. My Wireshark version is 1.12.There are 65,535 ports. YAY, works great! Did I find a bug, or am I doing something wrong? My OS is Windows 10, Build 10565. I then tried a live capture filtered for DNS. I got the same results capturing traffic, but nothing displayed. OK, so I thought this may have been a one-time glitch, so I tried a live capture with the ICMP filter applied again. I applied the ICMP filter to the saved file, and it filtered properly. I then loaded the saved ICMP file, Which I was able to view, but it had all protocols displayed, not just ICMP.

I was then able to capture and display all traffic again. I saved the original ICMP capture to disk, then restarted Wireshark. Again I could see at the bottom of the app that traffic was being captured. I stopped the capture, removed the filter, and started another capture of all traffic, but nothing was displayed. I could see that it was capturing network traffic at the bottom of the app window. I then pinged Google and Yahoo, yet no packets were displayed. While following a tutorial, I set a filter for ICMP traffic and started my capture.

Wireshark capture filter for ping