What are the major use cases for Wireshark?īock: In my book, I highlight a number of use cases that organizations can take advantage of.

Lastly, malicious actors can use Wireshark for reconnaissance activity. Security analysts can use Wireshark to monitor for unusual and suspicious activity. Network admins can use it to identify bottlenecks and congestion in networks. For example, developers can use it to identify the source of slow response times in an application. Lisa Bock: Wireshark is a versatile tool with many applications that can benefit nearly everyone in the technology industry. Read on as she explains more on Wireshark, its uses and how to use filters.Įditor's note: The following interview has been edited for clarity and length. These profiles enable users to dive deeper into results and quickly discover relevant answers during analysis. One important Wireshark feature to consider, Bock said, is customizable profiles that help improve a user's workflow. The book covers everything users need to get started using Wireshark, whether they're a beginner, network admin or security analyst. The tool comes packaged with a number of user-friendly features, however, that help users filter scan results to dip below the surface of the information reported and find data pertinent to their use cases.Īuthor Lisa Bock wrote Learn Wireshark: A definitive guide to expertly analyzing protocols and troubleshooting networks using Wireshark, Second Edition to help those who want to learn more about using the packet analysis tool. It could take days to sort through the data in a single scan. For one thing, the amount of information Wireshark collects and reports is staggering.

Wireshark display filters