Skip to content

How to install Wireshark to monitor your network – or use with NMAP packet scanner

09/06/2013

Step 1 – Download Wireshark

http://www.wireshark.org/download.html

Run as Administrator

wireshark download

Step 2 –  Install

Next

wireshark install 1I Agree

wireshark install 2Next

Disk space needed is 112 mb

wireshark install 3Next

Choose if Start Menu or Desktop Icon is preferred

wireshark install 4Next

By default it installs into the directory c:\ Program Files\ Wireshark

wireshark install 5

Install WinPcap – as Wireshark won’t work otherwise

Install

wireshark install 6Wait for the files to extract….

wireshark install 7

Step 2 – Install WinPcap

Wireshark won’t install unless WinPcap is installed.  Watch out for  a second install to be launched.  If you’re not looking for it, you could miss it.

Next

winpcap 1I Agree

winpcap2Install

winpcap 3Finish

winpcap4

That’s it!

Wireshark will now completely install for you.

If the install hangs half way through, it’s because WinPcap has not been installed yet.

*******

Next

wireshark 8 completed

wireshark 9 completed*****

Launch Wireshark

Start > All Programs > Wireshark Icon

wireshark

Wireshark launches

wireshark launch

Select your Interface (ie Wired or Wireless)

Then Capture Options

wireshark capture options

Promiscuous Mode > Start

Promiscuous mode means that it picks up packets and data for all devices on the network

That’s it – Wireshark will now listen in to all transmissions

promiscuous mode

******

Wireshark launches – by default it’s split into 3 panes

The top pane shows IP’s & protocols

wireshark results

******

You can filter these results by protocol and by IP, and I’ll cover that another time.

For now, select the Protocol header – and your results will sort by protocol.

ANALYSE > Display Filteranalyse menu

HTTP

Select HTTP

OK

http

HTTP ONLY is now displayed

http results

It’s File > Quit to exit.

Have fun.

Advertisements
Leave a Comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: