NETW310, Professor’s Name
Lab #5, Wireshark Introduction Lab

Lab Report #5

1. Is Wireshark open-source or proprietary?
Wireshark is an open-source network analyzer. Wireshark is free for anyone to use.

2. What is seen in each of the three panes that display the packets seen on a local area network?
The List Pane shows the packets have been saved or captured. The Tree View shows the headers of the different protocols in the packet and allows the user to see a hierarchical view. Finally, The Byte view shows the raw data at a rate of 16 bytes per row.

3. What does a display filter do?
The display filter allows you to pick and choose what packets are displayed in the List pane.

4. What does the protocol column show? The protocol column shows the highest layer protocol in the frame.

5. How do you expand the details in a layer of the packet in the middle frame?
If you press the “+” part of a packet in the tree view, you can expand the display details and see more information.

6. Capture files have what file name extension?
Captured files will have the file extension of “.pcap”.

7. The time column shows what? The time column shows the time starting at the first packet. By default, the packets are displayed in increasing order after the first one.

8. When you right click on something in one of the panes what happens?
You get a context menu just like in windows and it will allow you more control over the info you want to see.

9. How is a display filter removed?
To remove a display filter in Wireshark, you simply need toclick the “Clear” button in the filter area.

10. When a filter is correct what color is the background of the filter window?
When correct, the background of a filter window will be green.