Wireshark basic commands

1、 List available interfaces .

2、 Some options that need to be set when capturing packets . Generally, the last setting result will be retained .

3、 Start a new capture .

4、 Stop grabbing .

5、 Continue with this capture .

6、 Open the grab file . You can open the file saved after capturing the package before . Not only can you open wireshark Files saved by the software , It can also be opened tcpdump Use -w Parameter saved file .

7、 Save the file . Save the results of this packet capture or analysis .

8、 Close open files . When the file is closed , Will switch to the initial interface .

9、 Reload the capture file .

Two 、wireshark It is to capture the network packets of a network card on the machine , When you have multiple network cards on your machine , You need to choose a network card . If there are wireless and wired network cards , Then choose the network card you use for networking .

Click on Caputre->Interfaces.. The following dialog box appears , Choose the right network card . And then click "Start" Button , Start the bag.