Quick Start Guide

Wireshark Quickstart Guide
12
displayed – do not click the “Stop” button. Then go to your
web browser and enter a web address, such as
www.cnn.com . Finally return to Wireshark and click on the
“stop” button.
5) If none of these options worked, go to the Wireshark web
site and check the FAQs, the documentation and the wiki at
www.wireshark.com .
IV) Looking at Packets Captured by
Wireshark
Once you have captured a set of packets, Wireshark should
present you with a colorful window as shown in Figure 7 below.
Figure 7: Packet Listing Window
This window is divided into three areas.
i) Window Area 1: Summary
At the top is a colorful listing of all of the packets captured.
Each line is a summary of a single frame or packet that was
captured. The colors represent a coding scheme that can be used
to quickly detect the type of packet. For example, the
predominant color in the graphic above is light green. Light
green is the color for HTTP packets.
ii) Window Area 2: Detail
When you click on a packet in area 1, the packet structure is
shown in area 2. In the screenshot above, the packet shown in
dark blue has been selected; therefore area 2 shows more details
on that packet. In order to see more details, refer to Figure 8
below. This figure shows an enlarged version of area 2 from the
previous figure.