When your computer is constantly connected to the Internet or to a network, it is vulnerable to attacks and malware infections. In addition to using a powerful and updated antivirus solution, you can also use a network analysis tool to identify the malicious packets and block them. Such an application is Wireshark and it comes with no price tag.
When deploying Wireshark on your computer, you have the possibility to choose the plugins and extensions you want to install, such as the Dissector plugin, Tree Statistics, SNMP MIBs or the Meta Analysis and Tracing Engine.
Since these utilities are meant to provide a wider range of information about your network traffic and they can be easily disabled, it is advisable to install them as well. The same advice applies to the additional tools included in the setup and to the recommended file associations for the trace files found on your PC.
The final step before finalizing the initial configuration is for the setup to check whether you have WinPcap installed on your computer, and to install it if it is missing.If you are using several network cards, Wireshark allows you to choose the one you want to use for capturing the network traffic. Once the capture has begun, you can monitor all the connections and their corresponding details – you also get the chance to create filters so as to track only certain types of connections.
Another way to make sure you correctly monitor the type of packets you want is to apply color schemes for each type of connection, so that the most important ones are the most visible. If you are not satisfied with the color templates provided by Wireshark, you can create your own custom one, by specifying the shade you prefer and the string to be monitored.
Wireshark also comes with a Statistics function that can be used to generate reports to be analyzed at a later time. Depending on your necessities, you can choose to view the details of the protocol hierarchy, endpoint, packet lengths or the IO graph.
Overall, Wireshark can come in handy to all those who want to be in control of their network connections and limit them whenever needed. However, it does take an expert to use the app to its full potential.
What's New in This Release:
Bug Fixes:
· The HSRP dissector could go into an infinite loop. (Bug 7581)
· Versions affected: 1.8.0 to 1.8.2.
· The PPP dissector could abort. (Bug 7316, bug 7668)
· Versions affected: 1.8.0 to 1.8.2.
· An infinite loop in the DRDA dissector. (Bug 7666)
· Versions affected: 1.6.0 to 1.6.10, 1.8.0 to 1.8.2.
· A buffer overflow in the LDP dissector. (Bug 7567)
· Versions affected: 1.8.0 to 1.8.2.
The following bugs have been fixed:
· The HTTP dissector does not reassemble headers when the first TCP segment does not contain a full header line.
· HDCP2 uses the wrong protocol id.
· Several I/O graph problems have been fixed.
· No markers show up when maps are displayed. (Bug 5016)
· Assertion when using tshark/wireshark on large captures. (Bug 5699)
· Volume label field of "SMB/TRANS2-QUERY_FS_INFO/InfoVolume level" reply packet is not displayed correctly due alignment issue. (Bug 5778)
· 64-bit Wireshark appears to hit 2-Gbyte memory limit on 64-bit Windows. (Bug 5979)
· Truncated/partial JPEG files are not dissecte...