We will understand more while analyzing the packet in Wireshark. Below are some protocols which run in the application layer are the example of application layer software. We can see the port number is used in this layer.Īpplication Layer: This layer is closer to the user. Transport Layer: This layer can transmit or receive data from one device to another using a port number. We can see the IP address (IPv4/IPv6) in this layer.

Network Layer: This layer can transmit or receive a packet from one network to another network. We can see the MAC address of the device in this layer. This layer can be divided into 2 components, MAC and LLC. Physical Layer: This layer can transmit or receive raw binary bits over a physical medium like Ethernet cable.ĭata Link Layer: This layer can transmit or receive a data frame between two connected nodes. Let’s have one quick look at each layer’s job. In general, there are 7 layers for the OSI model and 4 Layer for the TCP/IP model shown in the below diagram.īut in Wireshark, we will see below layers for any packet.Įach layer has its job to do. Here are some important options are shown using a screenshot.īefore going to do packet analysis, we should be aware basics of networking layers. We will learn about those while doing analysis on captures. Now there are many options, and most of them are self-explanatory. Packet Bytes: Now, for the selected field of the selected packet, hex (default, It can be changed to binary also) value will be shown under the Packet Bytes section in Wireshark. Packet Details: Once we click on any packet from Packet List, packet details show supported networking layers for that selected packet. We can see the protocol column for the type of packet.

Packet List: This section displays all packets captured by Wireshark.

There are three sections inside Wireshark Once we choose the correct interface for capturing the whole Wireshark window looks like below. Once Wireshark is launched, we can select the interface where we want to capture, and Wireshark window looks like below We can also follow if we need step by step Wireshark installation help. So, everything will not match exactly, but we can understand the differences easily. Note that we will try to use the latest Wireshark for further discussion, and there will be very little differences between different versions of Wireshark.

Wireshark color codes explained