In this lecture we will start exploring the wide gooey.
And we will work with captcha filters.
So here we see the list of the interfaces that our shark can capture traffic from and to capture traffic
from an interface.
For example the wireless network connection interface.
I can double click on the interface or select it and then go to the captured menu and click on Start
or simply click on this icon.
So now we see the packets that are being captured on this interface and I can stop the capture by clicking
on this icon or button.
And here we see that we have three things.
The first pane is The Bucket List pane which contains the columns of no time source destination.
Protocol length and therefore that gives content details.
And this view of columns can be customized.
And here we see the details Bane which gives information about each layer content.
So
we see the protocols and airfields content and at the bottom we have the facts byte Spain which displays
the data content in hexadecimal or in binary which why a shark interprets in the details vein and we
can change the layout by going to the editing new and then references and then out and we can change
to the layout that we like.
So this one is the default layout so let us now start to capture again and continue without saving
and here we see that we have many of protocols in this capture.
So what if we want to focus our energies on specific protocol and to prevent the network interface card
from being overwhelmed so we can do that by going to the capture filter will it so if for example if
we want to capture
TCB traffic
you see now that we have packets of TCB only but no packets of UDP for example another way is by going
to this button
and then for example if I want to
capture the traffic that is not TCB so I will say no start.
Now we see that we do not have any traffic third way is by going to the capture I mean you and then
options and we see that the same dialog box we have seen before was opened and we can use existing
packet filters.
So for example if I click here you see that we have an existing captcha filters that we are included
by default with white shark.
So for example if I want to display would be only traffic I will sit here and click on the interface.
So how we see that we have traffic that is would be only and we do not see any traffic
and here we see this protocol the as is VB that is UDP protocol with the Port of nineteen hundred.
So what if we want to capture a traffic of that protocol only we can
go here.
We can manage these start filters and edit the existing one so this one of you to be only I can copy
that one and then here
said the would you want to be nineteen hundred
and then let us change this name to be as s DV
and then click on.
OK.
And now I can find this filter I did and then I think on the interface.
So now we see buckets of it as DV only so no TCB packets and no other UDP packets are captured
final way of working with capture filters is by going to the capturing you and then select capture filters
and this time I will create a new filter from scratch instead of modifying an existing one.
So I click here and let us
capture traffic going to the IP address of Google DNS and I will modify the name to we we will need
an S and then click on.
Okay.
And then I reach like that packets filter
and click on the interface.
So now we do not see any packets because we do not have any traffic to or from the specified IP address.
So I tried now to being that IP address
we see no traffic captured.
So in this picture we have explored the gooey of white shark and have seen multiple ways to walk with
the capture filters and in the next picture we will start see how to work with display filters.