Wireshark is really helpful to troubleshoot the communication between an IP-based unit (e.g. Wireshark allows the configuration of specific capture filters a detailed description of capture filters can be found here: PCAP-FILTERĮxamples of capture filters are provided here instead: Capture Filters capture TCP packets coming from the TCP port 80.capture TCP packets only, and ignore UDP (being the HTTP based on TCP).capture just the traffic that is sourced from A and directed to B (and back).It is necessary anyhow to configure capture filters: packets have to be analysed after the capture, so it's better to avoid picking up unnecessary traffic the less the captured packets are, the quicker the analysis will be.įor example, if the aim is to troubleshoot an HTTP conversation between Host A and Host B, we can try to filter out the network traffic that would be useless and confusing so we can: The huge list of network protocols supported by the software at all network levels ( L1-L7) makes Wireshark a really powerful tool, both for newbies and experts. Basically, Wireshark allows to capture all the traffic flowing through the network adapter, so that users can check frames, packets, conversations, timings, bandwidth, etc. Whoever works with networks agrees that Wireshark is probably the most useful tool to 'have a look' on what is going on the network.

Wireshark pcap filter on port