HakTip - How to Capture Packets with Wireshark - Getting Started

[@sazopro]

Finally someone explains wireshark in a simple and easy way to understand, love this lady.

[@leomcnamara8711]

Very well presented, and most entertaining. Appreciated all of the 'shark' references...

[@MalMilligan]

Nicely produced intro to Wireshark.

[@hak5]

+Mal Milligan Thank you! :)

[@mauriceudoh7243]

Shannon, I love your presentations. It is as fine as you are. Please keep it up because there are thousands that are still using all these presentations to learn, which means they are still relevant. Cheers !!!!!!!!!!!!!!

[@TomsChevelle]

Thanks Shannon, just downloaded Wire Shark a few days ago, awesome!

[@byAndreasEkberg]

KZbin served me this in my "next to watch" 😂😌✨

[@WorkAroundFails]

LOL have not watched HAK5 for couple months. I decided to get back into it. And WOW I'm in collage and doing networking and we did this first week(Same program)

[@declannnadozie4595]

Thanks Hak5 you guysteach like we are dummies

[@darrennguyen3196]

Thank you so much! your explanation was so clear and helpful. You save my assignment ^^ Lots of love

[@asusd6161]

you need to get laid.

[@gauravims025]

Nice video ...Keep sharing more...:)

[@KickF]

"Capture Packets" are`t the problem, understanding is another thing :P

[@master74200]

Yes. Data packets are just bundles of data being transmitted from one computer to another. That includes sending your password to the router you're connecting to, and sending information back and forth in the form of encrypted packets (bundles of encrypted data).

[@Psykoses]

I had a good laugh seeing that error when she started it, linux users are just so used to them.

[@GabREAL1983]

good video and shannon really looked good in this.

[@Lyecdevf]

The day I started to use wireshark and understand the basic consepts was indeed a great day for me. I felt right away much more empowered to use the web and it has ever since been one of must use tools for me. In fact it is one of the pillars that my security is based upon in windows. So that is what I need to ask you some thing about wireshark and that is if it is full proof meaning can it miss any packets. I am asking this because I have seen malware with checkboxes to evade wireshark!

[@jeremystahl4989]

Very informative Shannon! The gksudo tip was just what I needed to get this going. Thanks!

[@davidchang5862]

This lady sure know how to talk craps despite wireshark is much more powerful than all these words...

[@joekirklin]

excellent intro for me... thanks for doing this.

[@pfunix]

if you read the wireshark manual it's a good start

[@daveconyard8946]

Good post, Nice one, i love onions!

[@devendra.sanghavi]

My shark is excited !

[@ElEmigrante]

Shark week, Wireshark, and a shark aquarium in the background. I c what u did thar

[@aspdeepak4yt]

Your voice is so sweet and your pronunciation is cute!!

[@mohammedabrarahmed3299]

aspdeepak4yt I like it when you say Shaarrkk

[@mazronho]

I came by here before because Shannon is cute as hell, and now I am studying computer system security.

[@NeoCrypt01]

xD

[@miguelzaragoza4596]

Thanks a lot. 101 and Straight to the point.

[@TotalTech2.]

How long would it take to get "Good" with wireshark if you are a beginner?

[@hak5]

+Arenzoj If you work with it once a day, I'd give it a couple of months to memorize everything.

[@TotalTech2.]

Well thank you. That was much faster than I anticipated.

[@TheOriginalBleachX]

It will search for packets in your TCP/IP Layer? What is the TCP/IP Layer? Is that a new layer in the OSI model?

[@nikunjkrishnarayal]

Thanks for this series...

[@menkem7792]

i love your speech keep in touch

[@fabricio5G]

Nice production

[@telo6739]

Is this tutorial still relaevant in 2020 or should I look elsewhere? I see it was uploaded 8 years ago

[@KentC013]

That's all fun for doing some simple basic pcap's, but if you want to really use "Wireshark", learn it like I did by only running "tshark" in terminal/cmd. WAY better approach to doing captures that won't CRASH like the GUI

[@mwangarerashid2828]

Very educative Morse

[@mahiulalam7763]

your best if you are free you should make this playlist updated

[@southgeorgiawx2816]

Can you use wireshark to capture the .cap files, then use that .cap file in aircrack-ng for cracking wep/wpa?? Or would that .cap file contain different information, not used in aircrack-ng ?

[@southgeorgiawx2816]

+Jason T Trying to find Windows compatible software that will allow me to capture .cap files for aircrack-ng

[@HertNiks]

whats the point of capturing your own packets? how can i capture some one elses???

[@hak5]

Hert Niks We capture our own packets on shows because it is legal. You can capture someone else's packets in the same way on Wireshark, as long as you are legally allowed to do so.

[@HertNiks]

I wanna capture my phone on my wifi totest it out, but it doesnt allow me to. Probably my WiFi card ithink.

[@bsdtux]

Hert Niks You will need to setup a monitor port or do an arp cache poison or set your nic to the same mac address as your phone. This is because by default ethernet switches do not forward all traffic out every port unless it is a broadcast.

[@LG-Devil]

Point is to look for malware sending out data from your own PC. Sadly the most invasive malware out there right now is the Windows 10 operating system. It has a keylogger built-in, can record your webcam, browsing habits, and sold to the highest bidder. Most egregious virus ever, Windows 10.

[@Asfandyar_Khan_Khalil]

I have very little knowledge about packet sniffing but by enabling promiscuous mode, you can analyze others' data passing by the WLAN you are connected with.

[@BonnieBurns-yb9ml]

That kid with the black adidas yellow/gold stripes sweats, black top grey label "money hungry" stumbling around highgate 20 mins ago looked sick. Look powers Look, big brother criter check please.

[@BonnieBurns-yb9ml]

What u eating subway?

[@BonnieBurns-yb9ml]

Stumble past starbucks up the front steps back down

[@purushothamsharma1255]

Thank you.. 😀.. I have one question. You are using ubuntu but not any other pentesting OS. How are you so anonymous over internet with ubuntu!

[@lanceseidman]

You didnt really say sudo is something to do with graphics in a terminal did you? I know you meant audo allows you to run as a super user... Right? Gtk is a toolkit/framework for GUI... My bad, I knew I misunderstood.

[@vladdigby165]

What operating system are you using when you opened wire shark in the video if you do not mind me asking? Is it any of these? ubuntu, kali , Tails or red hat LINUX? I have no idea what red hat os actually does! Are you using a microsoft VB virtual machine may I ask???

[@robertbritton656]

VLAD DIGBY It's Ubuntu.

[@Barrosy]

5:50 I don't get any result, care to explain what I might be doing wrong and how I could solve this problem?

[@jonathantroy1861]

It's all fun and games until someone pokes an eye out.

[@skillazeffect]

yes sir re them....them.........eh ........young holiganz

[@pwn3d_d1rt]

Then it's a sport 👌

[@jampankingston1518]

Good video, hot presenter, and why not, here my like and another suscriber

[@barodev8325]

Nice one !

[@amargarit]

I have a clear hot spot. Anyway I can use wireshark to capture packets. I am studying how to mitigate attacks and I am new to wireshark......Thanks

[@omgwtfbbqalekx]

1:42 "they're like shark cages for the internet" Facepalm.

[@undertoes]

lol

[@nate8930]

LEAVE HER ALONE SHES A NICE LADY

[@None-vg1qw]

@@nate8930 n0

[@elbrince]

Baaaabbbyyy shark tooodoo tooodoo

[@hex1101]

Helps to have the right WiFi adapter. Not all of them will work. She's basically got the gist of it, but there are a ton of vids out there for this. Great network tool though.

[@sodafountan]

It's a good tool for network diagnostics, but other than that I haven't found much use for it.

[@TheUtmail]

Lovely video. I like it very much

[@adolphbot]

Impressive greenscreen work!

[@jimwin2011]

Cool video

[@bj0629]

lovely description

[@samanthgouru2407]

Can u please make a video on how to analyse logs!!!

[@kidonehh]

nice, i want more wiresharks tips ! i love you twice more since i saw your first favorite web page on your browser was minecraft

[@juanlyon3368]

cheers Shannon

[@lexroker]

shannon what is the soundtrack? :0

[@ChristofferEricsater]

Does it work equally well in a macbook with OSX or should one use Linux for sole specific reasons? Thanks for a good demo

[@jltplease]

great stuff!!

[@galiagabitova3780]

Good day! Thank you so much for this video! I am an absolute beginner in the analysis of networking. But I need to analyze the traffic from the user to one license server. In my Interface list I have item LAN connection, VMware Network Adapter VMnet1, VMware Network Adapter VMnet8, Cisco remote capture, Random packet generator, SSH remote capture. I choose LAN connection, I cann't change IP address to another. How can I set needed IP? Best regards Galiya

[@o.t.powell1142]

How is SSL decryption done? Can it be done with this? Still new at this obviously.

[@Pr3fixProducts]

By no means I wish to correct you, but I have you because it is ironic for somebody to say that someone else knows grammar better, yet they make grammatical mistake. It is not "better then you", but "better thAn you".

[@pinoyusedcars6315]

came here because of CS50 lol, Hi

[@maxlaval4419]

IT has never been this cute great video

[@muhon19]

Very helpful video

[@pericaluic4941]

Hello Hak5! I click to follow TPC stream and can not do anything. Why?

[@jn674]

Thanks, cool intro

[@BuzWarrior]

I'm wondering what model that netbook is...

[@BenZeghers]

Instead of using gksu to run wireshark as root you can give yourself permission to capture packets then run wireshark just like any other application sudo dpkg-reconfigure wireshark-common sudo usermod -a -G wireshark USERNAME

[@schifkofaz9147]

What version of wire shark is that?

[@superpowerforhire]

When you mentioned the VPN.

[@Henboy10]

It will show me the sites I go to on the computer that has it installed but not a different computer. Does it tell me the sites that other devices in the house go to?

[@purplemutantas]

Don't wait. Go out an learn. I successfully did a sidejacking attack on my flickr account using wireshark data. The information is out there if you go look for it. Also, just spend some time capturing packets. Then take some time to look at what's in those packets. Remember: You don't learn to hack; you hack to learn.

[@jackfrasiercomedy5942]

I love Shannon Morse. She's a cutie who actually knows what she's talking about! I have always wanted to learn this stuff, I'm going to watch this whole playlist! See that ring on her finger? All the good ones are taken. :(

[@sreejith_jinachandran]

Do video about Palo alto!!!

[@libanwattao90]

what software to do this kind of video to see what I do on my screen behind my back

[@sodaygo420]

how do i get the packets to aircrack-ng to analyze and get wep password?

[@gon1332]

DIY

[@hemakesstuff8053]

My user interface seems to be very different to hers? It seems like I have none of these options myself. Anyone help?

[@coondogtheman]

Is there a way to use this to capture streaming video packets when playing a video streamed over RTMP?

[@billweis4112]

Having problem getting promiscuous mode working for a wireless network, Wireshark is installed on a windows 10 Surface Studio. I have "Enable Promiscuous mode on all interfaces enabled" and I am running Version 3.0.2. I did install wireshark with "Support Raw 802.11 traffic (and Monitor Mode) for wireless adapters". During installation, I did not select "Install npCap in WinPcap API compatibility mode for my current installation. Was not sure about that setting. If I recall, I have tried installing with WinPcap compatibility mode enabled and disabled with no difference in results. (v3.0.2-0-g621ed351d5c9). "Compiled (64-bit) with Qt 5.12.3, with WinPcap SDK (WpdPack) 4.1.2, with GLib 2.52.2, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.14.0, with Lua 5.2.4, with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos, with MaxMind DB resolver, with nghttp2 1.14.0, with LZ4, with Snappy, with libxml2 2.9.9, with QtMultimedia, with AirPcap, with SBC, with SpanDSP, with bcg729". I also selected to install npcap. I am trying to troubleshoot an ESP8266 wifi issue at a customer site, and in my lab I can only see traffic to and from myself. I have tried this version of wireshark on a Surface Studio, Surface Pro 3 with the same results.

[@ayoub2696]

Hi when I open wireshark I don't find any network interface to select and also when I have installed Wincap and Ncap. I can't find any solution on the internet, can you help me?

[@IsmaelBarri]

tips for you guys, install Cain & Abel also & start start sniffing between any pc on the network & the gate way, get facebook cookies and create it on your browser, open facebook and it will open tht pc facebook :D

[@jonasrosenberg6510]

thanks!!!! was very helpful!

[@programminglover2851]

Hi. I decided to learn wireshark lastnight and I was working with it after watching your video... It was fine. But this morning I lose my Wi-Fi connection Immediately after I open wireshark and start capturing. It shows something about my router only! Like this one: 0 4 HuaweiTe_c1:69:02 Broadcast 802.11 269 Beacon frame, SN=1139, FN=0, Flags=........, BI=100, SSID=Blue_Island[Packet size limited during capture] And I see something about Malformd Packet. Any help will be appreciated!

[@DatoWayneva]

Is Wireshark working with Wi-Fi connection?

[@tonygame9007]

Omg the background had me dying jeje

[@danieldugal1534]

They've gotta have her do a guest appearance on "Big Bang Theory"...

[@GNU_Linux_for_good]

Do I have to do it as root? I get a warning message. I'm newbie on this matter. Thanks.

[@johnh1540]

Yes

[@RyanSlama]

Can we have an SSLstrip tutorial?

[@MystesNeedSoul]

i love her for showing this :D

[@vladdigby165]

Or actually I just created an BIOS with an old raspberry pi using a form of desbian. the folder was called NOOBS then I extracted it on to an SD card and when I put it in the pi the operating system just booted up! I used an SD card format. Although I do not think the pi will have the power to run wire shark, jonny the ripper and orpcrack ect ect ??? any reply would be appreciate.

[@avict1]

Can i capture packets from other devices on my home wifi network? for example can i find out which ip is browsing too much youtube? please explain

[@jangamingnl2527]

you can capture packets from other devices (on the same network) and you can see which computer (using the ip adress) is browsing on KZbin

[@christophervargas8551]

What if I want to monitor the other computers for security reason? is it possible if i use wireshark?

[@3nertia]

If you have a network interface that supports 'promiscuous mode'

[@fgadsadkadsdafa2927]

from her blog """She graduated from Missouri State University with a BS in Hospitality and Restaurant Administration"""......its seems that they just look to the shape these days .

[@irmada]

hi, how can you trace who is streaming youtube in the local area network?

[@potatoonastick2239]

Tony Ang You are stupid. The streamer is streaming to KZbin, which then sends the stream to you. There is no way to do what you want to do except if you own KZbin.

[@JuzzaAnssoe]

Potato on a stick ^ thats is not entirely true. you can fuck up his stream with just an ip.

[@irmada]

this is already over... still talk cock here everyone?

[@potatoonastick2239]

***** Oh trust me, I know

[@JuzzaAnssoe]

well so do I...

[@lorenzoiotti]

is there a way to edit the http requests?

[@samanthgouru2407]

Can you pls explain,how to write the test cases with explanations

[@FarmanF.O]

So how can i use this to know what my children are doing on internet ?

[@maxjupiter4880]

It only sniffing in your own computer NOT other computer in local network! Or how do I do that???

[@nerocon]

Its awesome for password recovery in plaintext protocols like FTP..

[@combatLaCarie]

I'm still waiting for the day that I learn how to actually make use of the data collected here.