WireShark captures packets, and analyses and displays them in a human-readable format. Some protocols are reliable, whereas others are not, which means they do not guarantee package delivery this is not always a problem, but the application must deal with it, if required. The header part contains information that is needed by the protocol, whereas the body part contains the data. Each packet has a header and a body part.

Information is transferred using packets. When we say TCP/IP, we not only mean the TCP and IP protocols, but many other protocols including ARP, BOOTP, UDP, ICMP, FTP, etc. Figure 1 shows WireShark run by a user without root privileges.īefore going into more details about WireShark, I have to talk about network traffic in Ethernet networks that use the TCP/IP family of protocols. Run WireShark as the root (sudo wireshark) when capturing data, and as a normal user when analysing network data. If you try to run WireShark as a normal user, you may not be able to use network interfaces for capturing network traffic, due to reasons related to UNIX permissions.

Wireshark android ohne root