From the course: Complete Guide to Linux Security: Protecting Your Linux Server Environment
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Wireshark - Linux Tutorial
From the course: Complete Guide to Linux Security: Protecting Your Linux Server Environment
Wireshark
- Part of my security mindset is the term, be vigilant, always be watching. And that means logging, auditing, and also doing things like packet captures. One of the best tools for this is called Wireshark. And if you look here, you see an example of the Wireshark program, and this allows us to be vigilant and capture packets that are being transmitted and received on a local system and remote systems. So we're going to do a little sub lesson here where we explain what Wireshark is and why we would want to analyze packets. We'll install Wireshark to our Linux virtual machine. We'll capture packets with Wireshark from our network interface card, and we'll analyze the packet capture. So let's jump over to our Debian client. And first thing I want to do is install Wireshark. So we'll do a sudo APT install Wireshark, and we will say yes. You can see it's going to install a lot of stuff. Okay, now we get a message here that says, dumpcap can be installed in a way that allows members of the…