I used the 64-bit version of Tshark 1.10.6 on Ubuntu 14.04 for this article. You can install Tshark via the command line or using a graphical tool of your choice. Tshark can therefore listen to all the traffic on the local network, and you can use filtering commands to narrow down the output to specific hosts or protocols that you want to study. In promiscuous mode, the network adapter hands over all the packets to the operating system, instead of just the ones addressed directly to the local system with the MAC address. Like other packet sniffers, Tshark switches the interface into promiscuous mode to listen for network packets. If you prefer to work at the command line, or if you don't have time to grapple with Wireshark's elaborate user interface, you can use Wireshark's little brother Tshark to sniff packets in a terminal window. Tcpdump is the tool of choice for gurus and professionals, but Wireshark appeals to many users because of its powerful GUI. Tools such as Tcpdump or Wireshark let you listen on the network to study and troubleshoot network problems. When the system logs fail to provide information on problems, or if you simply want to know what is happening on the network, it is worth taking a look at the data stream.
0 kommentar(er)
