Wireshark安装和基本使用

妖狐艹你老母 2022-12-25 01:52 112阅读 0赞

# Wireshark安装和基本使用 #

--------------------

## 目录 ##

1.  wireshark安装和语言设置
2.  wireshark基本使用(过滤表达式)

--------------------

### 1. wireshark安装和语言设置 ###

#### 1. wireshark安装 ####

1.  官网下载地址（我的是mac版）：[https://www.wireshark.org/download.html][https_www.wireshark.org_download.html]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70]
2.  安装即可
3.  如果打开报错：**The capture session could not be initiated on interface ‘en0’ (You don’t have permission to capture on that device).**  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 1]
4.  添加权限即可：**sudo chmod o+r /dev/bpf**\*

#### 2. wireshark中文设置 ####

1.  打开**preferences**，找到**language**，打开即可选择中文设置  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 2]

--------------------

### 2. wireshark基本使用 ###

#### 1. 界面介绍 ####

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 3]

#### 2. 过滤操作 ####

![在这里插入图片描述][20201130131840812.png]

##### 1. 过滤表达式 #####

1.  协议过滤：
    
    1.  **tcp**，只显示TCP协议
2.  IP地址过滤：
    
    1.  **ip.src == 192.168.1.1**，源地址
    2.  **ip.dst == 192.168.1.1** ，目标地址
3.  端口过滤：
    
    1.  **tcp.port == 80**，显示TCP端口为80的
    2.  **tcp.srcport==80**，显示TCP协议的源端口为80的
4.  HTTP模式过滤
    
    1.  **http.request.method == “GET”**，只显示HTTP GET方法的
5.  逻辑运算：
    
    1.  **ip.src`==`192.168.1.1 or ip.src`==`192.168.1.2** ，源地址为192.168.1.1或192.168.1.2
    2.  …

#### 3. 获取指定协议包 ####

1.  wireshark官网wiki可以获取指定协议包，比如你需要RTMP协议包，但网络环境不适合，直接下载RTMP协议包打开就可以：[https://gitlab.com/wireshark/wireshark/-/wikis/SampleCaptures][https_gitlab.com_wireshark_wireshark_-_wikis_SampleCaptures]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 4]
2.  下载后解压，通过File -> Open 打开即可。  
    ![在这里插入图片描述][20201130141152142.png]

[https_www.wireshark.org_download.html]: https://www.wireshark.org/download.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70]: /images/20221120/7664d36296f84f9487b3de7ba7c03f69.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 1]: /images/20221120/9a2b93c30c1a424faf792ec18460c77f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 2]: /images/20221120/7ebd79dde76c40c3b590deaeefb11122.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 3]: /images/20221120/9bc51817aad044e5bc7ca40cf6786ea5.png
[20201130131840812.png]: /images/20221120/fe0a1c7bb720410ea4cfd4b5035b3e82.png
[https_gitlab.com_wireshark_wireshark_-_wikis_SampleCaptures]: https://gitlab.com/wireshark/wireshark/-/wikis/SampleCaptures
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA_size_16_color_FFFFFF_t_70 4]: https://img-blog.csdnimg.cn/20201130141051602.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MTkxMDY5NA==,size_16,color_FFFFFF,t_70
[20201130141152142.png]: https://img-blog.csdnimg.cn/20201130141152142.png