“it is better not to use network resolution feature as it is incorrect most of the time”, Resolve transport name which gives the port no. It gives the website or the service name based on IP. Options: This window presents the user with options like when to end the capture or resolution of MAC address to its manufacturer’s name by taking the first 24 bits of the MAC address, Resolve network which is like reverse DNS lookup. For example, the user-created three files using a ring buffer so when the ring buffer is used the first file when gets filled with the packets, the data is then stored to the second file and when the second file gets full storage is transferred to the third file and when the third file gets full storage is again moved to the first fileģ. Ring buffer: The user selects the number of files to be created to capture packets.

Wireshark is also capable of monitoring unicast traffic

Various network taps or port mirroring techniques is used to extend the packet When it comes to capturing traffic over a network made up of multiple switches, the switch will not pass all the traffic to the specific port, making monitor mode insufficient to see all the traffic. it enables the network interface to capture network traffic from any access point falling in the range without having to associate with the network. Monitor mode works only with wireless access points. This mode can be used with both wired and wireless networks Promiscuous mode is where the network interface captures all the network packets on the network segment assigned to and captures all the packets that are flowing in the network. Wireshark operates on two different modes Promiscuous mode and monitor mode.

It is an open-source tool mainly used for analyzing network packets, it serves other purposes also like, Software Development, Communication Protocol Development, Network Troubleshooting, or Educating people about Networks, it allows users to see and capture all the traffic being passed over the network, troubleshooting latency & malicious network activities.

Wire shark tutorial