Essentially with navigating the GUI,
one of the things that we want to do
is we want to ensure that
we've started with the dashboard and
we understand what the launchpad is.
This is the start page or what we call,
I like to call the launchpad 'cause
you're going to basically select an interface,
you're going to start or load a capture.
And then from there, you're a, you know,
you're going to start your capture window
and you're going to see your 3 panes and
be able to capture data. But with newer
versions of Wireshark, the launchpad tier
and it just helps you to do what's
one of the most important things is select
the correct interface which is confusing to some.
Because as an example, if you're trying just
to capture wireless LAN data and you just,
you know, ran a capture, you may not have
selected the wireless LAN adapter,
you may have selected the LAN adapter.
Simple mistake, but this dashboard helps you
to limit that as well as when you configure
capture options like we were just saying before
when we were answering questions
you can set up a pre-capture rule.
You can choose not to see all the traffic
originating from your machine.
You can limit the amount of data
in the capture files. And there's a lot of things
that you can do from this launch pad.
You can also do this from the capture window,
just makes it easier.
And you can select currently viewed captures
as well as, you know, getting help.
So, the main interface capture window
what we'd like to call, launch pad
is basically, your navigation panes
which is capture, files and online.
And with these particularly,
one of the things that we want to do,
is we want to understand that in the
capture section, we have an interface list,
we can select what interface we want,
we can hide interfaces we don't want to see,
we can adjust specifically settings on
those interfaces and capture options.
We can check the health of them.
We could see what IP addresses configured.
We can set pre-capture filters,
so that we can limit the amount of data
we capture and, and more.
In the file section basically if you're going to
open a previously saved capture,
and the sample captures,
so, just a brief note on sample captures.
So, this ties in to the online pane where you
see the website user guide and so on.
The Wireshark.org site is very robust.
I like that it's actually very clean.
It's not something overblown
but it's a, it's got a ton of information.
You'll see in future modules the, the 2 links
directly to the website, so you can right click
at some data in, that you've captured.
and it'll take you directly to the website
to help explain something.
And it has a sample capture repository.
It is not the only one.
But it happens to be a large one and it's helpful
to help round out exactly
what it is that you're looking for.
When you learn about protocols and or
if you're capturing data that you may not
understand, there's some sample captures up
there to help show you how to, to find and
translate this data and what it looks
like when you capture it.
So as we mentioned,
you're going to select an interface.
You're going to pick the one that's appropriate.
You're going to either load or start a capture.
And once you do, you're ready to go.
And if you need help,
that's a direct link to getting help.
Once you start your interface capture,
you're going to open up the capture window,
and you're going to see your 3 main panes.
We'll start with the packets list pane.
We'll get more into detail into
the other 2 panes as we go.
But the most important one is the top pane,
called the packets list pane where
in that particular pane, you're going to see
streaming data. You're going to see all
the data that's captured
with Wireshark during live capture.
It's going to be numbered sequentially.
It's going to be timed. You can change
the time which we'll get to.
These columns of data, you can customize,
you can add. You can build upon to show
what it is that you want to see.
So it's a lot of customization we're going to
get to in the next few modules.
But particularly, this is what you're
going to see when you open up
the capture and begin your capture.
So the 3 main panes obviously,
we discussed the packets list displays all the
packets in the current capture file.
The packet details - so when you're in packets,
packets list pane and you select the
packet you want to review in deeper detail,
you can double click on it and
it can open up a second window
or you can see a, single click it, and
you'll see it in the capture window.
But this is what it's going to do the drill down
so that you can see deeper in.
And that's what the packet details will display -
the more granular detail about
the packet that you select.
And then the packet bytes is going to show
you selected packet list in hex,
give you some ASCII data and so on.
So the capture window,
we're going to get into this next, but
there's a lot of menus and a lot of toolbars.
A lot of tools that you need
to learn how to use to be able
to navigate the system correctly.
We're going to go into detail
on every single menu.
We're going to talk about the tools.
We're going to show captured data,
sample data. We'll show specifically,
the tools that are in the menus and
we're not going to cover every single detail
and every single menu
but we're going to talk about
what's most relevant to troubleshooting.
We're going to go very deep into filtering
and displaying filtered data, regular expressions,
and specifically tools that
will allow you to look at streams and how data
interacts from source to destination.