Depending on your computer’s settings you are likely using either the Wi-Fi or Ethernet interface. In order to analyze our traffic, we need to choose the correct Interface. A flat line means there is no activity while a changing line shows there is activity. Next to each interface will be a graph displaying the current activity. Once Wireshark is running, you’ll see a screen displaying multiple interface collection network data. Make sure Wireshark is also in your Applications folder, and run the following command to be prompted for your password by sudo: macOS: Run an exec file that lives inside the Wireshark package contents.Linux: Type sudo wireshark in your terminal.Windows: Right click the Wireshark application and click “Run as Administrator”.Once installed, run the software as an administrator. Below are the official guides for installing Wireshark: Once you’ve verified your system can run Wireshark, you can download the tool from the official download page.ĭepending on your operating system, you may need to install additional components built into Wireshark. Check system requirements for more information. Fortunately, Wireshark is extremely efficient and does not require much from your computer.

Prior to installing Wireshark, you’ll want to make sure your computer is able to run the software. In this tutorial, we’re going to take a look at Wireshark, a freely available network analysis tool with support for Mac, Linux, and Windows operating systems. Whether you’re a penetration tester looking for sensitive information in traffic, or a SOC analyst looking for malicious activity, the ability to analyze network communications is crucial!

When working in cybersecurity, it’s common that you may need to review network activity.

Windows wireshark filter dns traffic