Network Traffic Analysis with Wireshark

Project Overview

This project involved setting up and using Wireshark to capture and analyze network traffic on a virtual machine. The process included updating the system, installing Wireshark, configuring it, and performing detailed analysis of network traffic.

Key Steps

1. System Update: Used sudo apt update to refresh package lists for upgrades and new installations.
2. Wireshark Installation: Installed Wireshark using sudo apt install wireshark.
3. Wireshark Configuration:
   • Selected enp0s3 as the network interface for capturing traffic.
   • Enabled promiscuous mode to capture all packets on the network.
4. Permission Configuration:
   • Reconfigured Wireshark to allow non-superusers to capture packets using sudo dpkg-reconfigure wireshark-common.
   • Added the user to the Wireshark group with sudo usermod -a -G wireshark hasan.
5. Packet Capture and Analysis:
   • Started capture on enp0s3 and used filters (e.g., http, ip.addr, tcp.port) to focus on specific traffic.
   • Analyzed protocols such as TCP and ICMP in detail.
   • Reviewed protocol hierarchy and conversations between network devices.

Key Skills Acquired

• Proficiency in configuring Wireshark for packet capture.
• Understanding of network protocols and traffic analysis.
• Managing Linux user permissions and groups effectively.

Tools Used

View or Download Project