Resize the panes in Wireshark so that only In the example below, it is packet number 519. In the example below, it is packet number 511.įind the response to that packet, with a Source of 147.144.1.212,Īnd ' HTTP/1.1 302 Found (text/html)' in the Info column. The CCSF Web server has an IPv4 address of 147.144.1.212.įind a packet with a Destination of 147.144.1.212 (the CCSF Web server), and ' GET / HTTP/1.1' in the Info column. In the Wireshark window, scroll back to the top of the packet list. You should see a lot of text scroll by in the Wireshark window.įrom the Wireshark menu bar, click Capture, Stop. Wireshark now just sits there, with little or no visible traffic, because it is ignoring all the non-HTTP packets. To make Wireshark easier to use, you can Filter the traffic, to see only the interesting packets. Broadcast traffic is common on networks as network devices alert one another of their presence.

Notice that some lines show Broadcast in the Destination column.

Destination Destination address of the frame.

Time Time in seconds that the frame was captured.

Upper pane summarizes one frame (or packet).įind these columns in the Wireshark window: You should see a lot of text scrolling by, as shown below on this page. Of the interface, which is four values separated by periods,Ĭlick the Start button next to the interface that connects Wireshark will show the other addresses of this interface.Īfter one or more clicks, you should see the IPv4 address Number of packets-this is the interface that connects With fe80: - these are 'Link-Local IPv6 Addresses', andįind the network interface with the most rapidly increasing In the upper left of the Wireshark window, clickĪ list of network interfaces appears. If a User Account Control box appears, allow the program to run. Right-click Wireshark and click 'Run as Administrator'. In the Search box, type WIREĪt the top of the menu, a Wireshark item appears. It will also install WinPCap.Ĭapturing All Network Traffic With WireSharkĬlick the Start button. If Wireshark is found, that means it's already installed and you can skip the following steps. I wrote the instructions for Windows 7.Ĭlick the Start button. Project 1: Sniffing HTTP Traffic with Wireshark (10 pts.) Project 1: Sniffing HTTP Traffic with Wireshark (10 pts.) What You Need

Wireshark capture http traffic