In this lecture I will give a brief introduction about why shock so why a shark is a network racket
analyzer that displays the details of captured network traffic it is an open source and free software
that is considered the de facto standard across many commercial and non-profit enterprises government
agencies and educational institutions.
And since white shark is an open source application developer to call the sectors for unsupported protocol
for example and added to a shark it is used by I.T. professionals especially in the network and security
fields for bass lining performance troubleshooting and security analysis which is the main bar was for
using white shark as a tool in the cyber ops field it was named as here yet originally but then renamed
to our shark in 2006 to capture and analyze traffic that is not distinct to your machine using white
shark.
The network interface card must work in the must guess mode
and you can install wire shark on the ABC or the server that you want to troubleshoot or indicate the
traffic to another machine where white shark is installed using network tap.
Have that floats all network traffic or who's board metering only switch and this last option is the
most common one
so when walking with wire shark we have different kinds of filters captcha filters that are life filters
that we have to use since interfaces have limit capture credibility that is lower than their actual
bandwidth and also because of hard disk.
I mean really mutations to enhance while shock performance and to focus the analysis on specific packet
types.
And we have display filters which are after capture filters that display a subset of the packets captured
using the capture filter and its main barbers is to focus the analyses.
They are more granular in church and there is no that lose because we do not filter back it captures
as the cases we capture.
Filters.
Then we have color filters that were renamed to color in groups that have the same text of display filters
and can be considered modified or another type of those and we can use existing filters of all these
types that come by default with white shark and that can be modified or we can create new ones that
will be saved to be used later without the need to rewrite them again.
So in this lecture I have given a brief introduction about white shark and in the next picture we will
start our hands on by downloading and installing it.