Skip to main content

Wireshark 101

Learn the basics of Wireshark and how to analyze various protocols and PCAPs

Task 1: Introduction

Task 2: Installation

Task 3: Wireshark Overview

Task 4: Collection Methods

Task 5: Filtering Captures

Task 6: Packet Dissection

Task 7: ARP Traffic

Task 8: ICMP Traffic

Task 9: TCP Traffic

Task 10: DNS Traffic

Task 11: HTTP Traffic

Task 12: HTTPS Traffic

Task 13: Analyzing Exploit PCAPs

Task 14: Conclusion

Back to all walkthroughs
Room Icon

Wireshark 101

Premium room

Learn the basics of Wireshark and how to analyze various protocols and PCAPs

easy

60 min

101,648

User profile photo.
User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Wireshark, a tool used for creating and analyzing PCAPs (network packet capture files), is commonly used as one of the best packet analysis tools. In this room, we will look at the basics of installing Wireshark and using it to perform basic packet analysis and take a deep look at each common networking protocol.


PCAPs used in this room have been sourced from the Wireshark Sample Captures Page as well as captures from various members of the TryHackMe community. All credit goes to the respective owners.

Before completing this room we recommend completing the 'Introductory Networking'. If you have a general knowledge of networking basics then you will be ready to begin.

Answer the questions below
Read the above and move on to Installation.