Wireshark allows us to capture raw data which is then presented in a human-readable format, making it possible for you to understand the flow of traffic within the network.īefore we can begin capturing packets for analysis, we need to take into account the types of devices available on the network and the traffic they emit. How to use Wireshark for packet analysis and filtering Determine systems within the network that are heavy on bandwidth consumption.Determine network statistics by filtering network packets based on your requirements.Determine which machines and resources to isolate from the network due to the traffic coming from them.Detect malicious traffic from malware or network intrusions from unauthorized or malicious individuals/parties.Analyze problems within the network by assessing the packets as traffic runs through the network.In order for us to understand what we are dealing with and to troubleshoot the problem, we make use of packet analyzers such as Wireshark in order to perform network analysis. There are many things that can go wrong within a network.

Malware traffic analysis wireshark