Systems Administrator at a tech services company with 51-200 employees
Real User
Top 10
Oct 25, 2024
We are using Wireshark for inspecting the vertical line to know the data flow in and out of the cables. This is to determine if there is real traffic flow through the physical connections or not. Additionally, we use Wireshark for physical inspection on the data line.
I use the solution for port mirroring the SPAN ports to send the packet output out of a mirrored port I'm capturing. It helps me determine where the network communication is dropping. Six months ago, I used the tool with a Palo Alto firewall. We had a problem connecting to Azure ExpressRoute. We had to configure QinQ encapsulation. The solution helped us see that the configuration of the network equipment wasn't encapsulating QinQ. So, we knew what the problem was and what we needed to fix.
Wireshark is a network analyzer used to capture traffic. It's used to analyze patterns in the network to check for any malicious traffic generated from devices or endpoints.
When we can see in the customer environment that traffic is getting blocked; suppose we have a VPN channel, and when the VPN channel is up but the traffic is not running through it, we use Wireshark to recapture the channel. We check whether the PPP handshake is ongoing or not. The acknowledgment team posts this packet, and after that, the PPP handshake is ongoing or not. So these are the things that we check by filtering out the things and based upon that, we get support. Because in five to six seconds, there are more than a thousand packets. So we have to filter out and check on which speed it is getting dropped. For that reason, we are using Wireshark. I am using it just for troubleshooting purposes.
There were many use cases of Wireshark. When I was working in Genpact, we were handling more than 850 projects. Wireshark was a great help when we could not open any website or URL given by customers because it was getting blocked.
Teaching Assistant at University of Colorado Boulder
Real User
May 19, 2023
Wireshark is one of the best and most popular network management or monitoring tools. Whatever traffic is going from your Internet, you can use the solution to make a plugin into that. You can take a replica of that, and from layer one to layer seven, you can check how the packet is loading and what all information is included in that. Overall, Wireshark is the number one software in the industry that everyone uses for network management.
Team Lead - Cyber Security & Compliance at Al Tuwairqi Group
Real User
Mar 3, 2023
The primary purpose of Wireshark is to monitor network communications. For example, if we need to track our target in order to exploit it, or to understand our use cases, we can use Wireshark for both internal and external penetration testing. We can use Wireshark to capture communication from any IP, and if there is no encryption, we can also use it to retrieve client passwords. This is the main function of the solution.
Student at a university with 1,001-5,000 employees
Real User
Dec 14, 2022
I have been using Wireshark for the packet tracing, and it has helped me to find out whatever site, et cetera. It is useful, basically capturing packets of data on the network. It helps us to identify the source the packet is originating from and it also helps us to know about the return time of the packet from when the packet is going from our computer to when it reaches the destination IP address. It helps diagnose internet connectivity problems and also helps us to know what the website data consists of and how much data is in the website. And it also helps us to know about the various protocols which are being utilized when we are connecting to the internet. We also get to know what bites, et cetera, are present in our data or if there is any malicious packet that is not supposed to come in. Based on it, we can configure our firewall.
We're using an internal Wi-Fi card in the laptop, so we configure that particular wireless interface into monitoring mode, configure the channel, and use Wireshark for that specific interface. We can capture the packets and activities on that channel, analyze the packets for poor connections, etc.
Service Operations Engineer at a tech vendor with 10,001+ employees
MSP
Top 20
Oct 3, 2022
We primarily use the solution for reading packet captures. It's like a packet analyzer, packet capture. I'm just reading some packets and looking for interesting tracking. That's all.
We use Wireshark to check the network traffic, and if there's any network problem or issue, we can check it through the tool. We also use Wireshark during analysis, to check if there's any network connectivity or attempts from the malware to communicate with the C&C server. We use the tool for further analysis and investigation.
It's a tool that we use to capture the network and if there is any lag or if there are packet drops. It's a very useful tool. We are using it to monitor any network depreciation. For example, suppose there's a call going on between two IP phones and one person says that I cannot hear you. There's definitely something wrong. The RTP is getting dropped, and the packets are getting dropped. We need to capture the live call or if there are any prerecord calls for this particular time period. We go ahead and use this tool to find out whether the packets dropped when a packet is dropped and what caused the audio issue or video issue. We actually use it to understand any network issues.
Cyber Security and IT Head at a outsourcing company with 51-200 employees
Real User
Top 20
Jun 21, 2022
I use Wireshark for DT inspection of several protocols and choose different color patterns to make it easy to see the various protocols. It also involves live analysis because I can see the live analysis on the Internet. The main task of Wireshark is to inspect the throttle and live data, and it's doing them.
Network Security Engineer at Ares Management Corporation
Real User
Jun 2, 2022
We primarily use Wireshark for troubleshooting critical issues in our network, retrieving packet headers using packet capture, and for creating custom apps. There are six people on our team and we all use Wireshark on our devices.
Competence Center Manager at a tech services company with 201-500 employees
Real User
May 18, 2022
We use Wireshark as a tool for network troubleshooting when we need to verify something directly. It is not used every day. As an example, FortiGate, Wireshark can also export, we can pick up a file, process it, and apply it. Some tools allow us to take, capture, define and export to Wireshark, so we are able to analyze in great detail.
Founder and CEO at a tech services company with 1-10 employees
Real User
May 5, 2021
I used it for a couple of school projects last semester. We basically had to emulate how to capture packets in transit in a network. After capturing those packets, we analyzed them. We also had to break down email messages and dig out pictures inside email messages. It was deployed through a cloud. They had set up a subscription for a class VM.
NextGen TV (ATSC 3.0) Systems Engineer at PeerSpot
Real User
Top 10
Mar 16, 2020
I use it for network investigation, I even have a patent for the simplification of Protocol Analysis. I have used Wireshark many times to troubleshoot network situations and problems. The patent solved the problem of troubleshooting where you needed to know the direction and course a packet takes in the network which helps with the ability to know where problems lie in the network. We developed the system to actually troubleshoot an entire network through the use of network probes, which acted as smaller protocol analyzers.
We are using Wireshark for inspecting the vertical line to know the data flow in and out of the cables. This is to determine if there is real traffic flow through the physical connections or not. Additionally, we use Wireshark for physical inspection on the data line.
I use the solution for port mirroring the SPAN ports to send the packet output out of a mirrored port I'm capturing. It helps me determine where the network communication is dropping. Six months ago, I used the tool with a Palo Alto firewall. We had a problem connecting to Azure ExpressRoute. We had to configure QinQ encapsulation. The solution helped us see that the configuration of the network equipment wasn't encapsulating QinQ. So, we knew what the problem was and what we needed to fix.
Wireshark is a network analyzer used to capture traffic. It's used to analyze patterns in the network to check for any malicious traffic generated from devices or endpoints.
I use the solution to analyze packet captures that I receive from customers. It can also be used for troubleshooting networking issues.
When we can see in the customer environment that traffic is getting blocked; suppose we have a VPN channel, and when the VPN channel is up but the traffic is not running through it, we use Wireshark to recapture the channel. We check whether the PPP handshake is ongoing or not. The acknowledgment team posts this packet, and after that, the PPP handshake is ongoing or not. So these are the things that we check by filtering out the things and based upon that, we get support. Because in five to six seconds, there are more than a thousand packets. So we have to filter out and check on which speed it is getting dropped. For that reason, we are using Wireshark. I am using it just for troubleshooting purposes.
There were many use cases of Wireshark. When I was working in Genpact, we were handling more than 850 projects. Wireshark was a great help when we could not open any website or URL given by customers because it was getting blocked.
Wireshark is one of the best and most popular network management or monitoring tools. Whatever traffic is going from your Internet, you can use the solution to make a plugin into that. You can take a replica of that, and from layer one to layer seven, you can check how the packet is loading and what all information is included in that. Overall, Wireshark is the number one software in the industry that everyone uses for network management.
The primary purpose of Wireshark is to monitor network communications. For example, if we need to track our target in order to exploit it, or to understand our use cases, we can use Wireshark for both internal and external penetration testing. We can use Wireshark to capture communication from any IP, and if there is no encryption, we can also use it to retrieve client passwords. This is the main function of the solution.
I have been using Wireshark for the packet tracing, and it has helped me to find out whatever site, et cetera. It is useful, basically capturing packets of data on the network. It helps us to identify the source the packet is originating from and it also helps us to know about the return time of the packet from when the packet is going from our computer to when it reaches the destination IP address. It helps diagnose internet connectivity problems and also helps us to know what the website data consists of and how much data is in the website. And it also helps us to know about the various protocols which are being utilized when we are connecting to the internet. We also get to know what bites, et cetera, are present in our data or if there is any malicious packet that is not supposed to come in. Based on it, we can configure our firewall.
Our primary use case for the solution is to see the over-the-air packets, the data transmission, and the wifi connection.
We're using an internal Wi-Fi card in the laptop, so we configure that particular wireless interface into monitoring mode, configure the channel, and use Wireshark for that specific interface. We can capture the packets and activities on that channel, analyze the packets for poor connections, etc.
We use this solution for troubleshooting network issues.
I use the solution to monitor our company network. It is installed on my PC and I pull data from our local server to conduct monitoring.
We primarily use the solution for reading packet captures. It's like a packet analyzer, packet capture. I'm just reading some packets and looking for interesting tracking. That's all.
We use Wireshark to check the network traffic, and if there's any network problem or issue, we can check it through the tool. We also use Wireshark during analysis, to check if there's any network connectivity or attempts from the malware to communicate with the C&C server. We use the tool for further analysis and investigation.
It's a tool that we use to capture the network and if there is any lag or if there are packet drops. It's a very useful tool. We are using it to monitor any network depreciation. For example, suppose there's a call going on between two IP phones and one person says that I cannot hear you. There's definitely something wrong. The RTP is getting dropped, and the packets are getting dropped. We need to capture the live call or if there are any prerecord calls for this particular time period. We go ahead and use this tool to find out whether the packets dropped when a packet is dropped and what caused the audio issue or video issue. We actually use it to understand any network issues.
I use Wireshark to analyze packets, especially network packets.
I mainly use Wireshark for knowledge purposes, debugging, and to view what's going on in the network.
I work on WiFi and I am a customer engineer. We use Wireshark to analyze the sniffer captures or tcpdumps. That's the purpose of the solution.
I use Wireshark for DT inspection of several protocols and choose different color patterns to make it easy to see the various protocols. It also involves live analysis because I can see the live analysis on the Internet. The main task of Wireshark is to inspect the throttle and live data, and it's doing them.
We primarily use Wireshark for troubleshooting critical issues in our network, retrieving packet headers using packet capture, and for creating custom apps. There are six people on our team and we all use Wireshark on our devices.
We use Wireshark as a tool for network troubleshooting when we need to verify something directly. It is not used every day. As an example, FortiGate, Wireshark can also export, we can pick up a file, process it, and apply it. Some tools allow us to take, capture, define and export to Wireshark, so we are able to analyze in great detail.
I mainly use Wireshark to look at traffic conditions when something is getting stopped in our network.
This solution is deployed on-premises.
I used it for a couple of school projects last semester. We basically had to emulate how to capture packets in transit in a network. After capturing those packets, we analyzed them. We also had to break down email messages and dig out pictures inside email messages. It was deployed through a cloud. They had set up a subscription for a class VM.
I basically use Wireshark for network troubleshooting.
I use it for network investigation, I even have a patent for the simplification of Protocol Analysis. I have used Wireshark many times to troubleshoot network situations and problems. The patent solved the problem of troubleshooting where you needed to know the direction and course a packet takes in the network which helps with the ability to know where problems lie in the network. We developed the system to actually troubleshoot an entire network through the use of network probes, which acted as smaller protocol analyzers.