Wireshark Setup and Use
Wireshark is the world’s foremost and widely-used network protocol analyzer. It lets you see what’s happening on your network at a microscopic level and is the de facto (and often de jure) standard across many commercial and non-profit enterprises, government agencies, and educational institutions. Wireshark development thrives thanks to the volunteer contributions of networking experts around the globe and is the continuation of a project started by Gerald Combs in 1998.
Wireshark is an excellent open-source tool with wide use. Capabilities include inspection of dis packets.
Capturing DIS Packets by Tobias Brennenstuhl is his thesis annex specifically written to help support student efforts.
Installation and Configuration
IMPORTANT: if you have already installed Wireshark, check your version!
Always use the latest so that operating-system security and feature sets are up to date.
- Download Wireshark from https://www.wireshark.org
- Install as local administrator if possible
- Launch and see if network packets are being detected.
| Successful installation, monitoring | Failed installation, no monitoring |
|---|---|
 |
 |
- Check your network interfaces via console commands ipconfig
- Double-check network interfaces using ipconfig /all to see any hidden interfaces
Capturing Packets
- Confirm preferences: File > Preferences > Capture as shown
- Set filter to dis
- Lauch one of the example programs to send packets, then observe results.
Troubleshooting
- huh
References
- Wireshark intro video and Go Deep
- Wireshark FAQ