1.Wireshark介紹
Wireshark 是一個開源的網(wǎng)絡(luò)協(xié)議分析工具，它能夠捕獲和分析網(wǎng)絡(luò)數(shù)據(jù)包，提供深入的網(wǎng)絡(luò)故障排除、網(wǎng)絡(luò)性能優(yōu)化和安全審計等功能。它支持跨多個操作系統(tǒng)，包括 Windows、macOS 和 Linux。
2.Wireshark主要使用方法
- 捕獲數(shù)據(jù)包：
????????打開 Wireshark，選擇要捕獲數(shù)據(jù)包的網(wǎng)絡(luò)接口。您可以選擇物理網(wǎng)卡或虛擬接口。
點(diǎn)擊“開始”按鈕開始捕獲數(shù)據(jù)包。
????????Wireshark 將開始監(jiān)聽選定的接口，并顯示捕獲到的數(shù)據(jù)包。
- 分析數(shù)據(jù)包：
????????捕獲到的數(shù)據(jù)包將以列表形式顯示在 Wireshark 界面上。您可以查看每個數(shù)據(jù)包的詳細(xì)信息，如源地址、目標(biāo)地址、協(xié)議類型等。
????????Wireshark 還提供了過濾器功能，使您可以根據(jù)特定的協(xié)議、源/目標(biāo)地址、端口等條件來篩選和查找感興趣的數(shù)據(jù)包。
????????可以查看每個數(shù)據(jù)包的原始數(shù)據(jù)以及解析后的協(xié)議信息，以深入了解網(wǎng)絡(luò)通信過程。
- 分析工具和功能：
????????Wireshark 提供了一系列強(qiáng)大的分析工具，如統(tǒng)計信息、流量圖表、協(xié)議層次結(jié)構(gòu)圖等，以幫助您分析和診斷網(wǎng)絡(luò)問題。
????????您可以使用統(tǒng)計功能來獲取有關(guān)數(shù)據(jù)包數(shù)量、協(xié)議使用情況、流量分布等方面的信息。
Wireshark 還支持導(dǎo)出數(shù)據(jù)包以供進(jìn)一步分析或與他人共享。
3.CentOS 圖形化Wireshark快速安裝
- 安裝Wireshark
????????如果直接安裝wireshark，則不包含圖形化界面，可以在命令行執(zhí)行tshark來使用。如需圖形化界面，選擇包含gnome的版本安裝。文章來源：http://www.zghlxwxcb.cn/news/detail-681919.html
sudo yum update
sudo yum search wireshark
sudo yum install wireshark-gnome.x86_64- 啟動Wireshark
sudo wireshark &- 安裝過程?
[xxx ~]# sudo yum update
[xxx ~]# sudo yum search wireshark
Loaded plugins: fastestmirror, langpacks, nvidia
Loading mirror speeds from cached hostfile
============================ N/S matched: wireshark ============================
wireshark-devel.i686 : Development headers and libraries for wireshark
wireshark-devel.x86_64 : Development headers and libraries for wireshark
wireshark-gnome.x86_64 : Gnome desktop integration for wireshark
wireshark.i686 : Network traffic analyzer
wireshark.x86_64 : Network traffic analyzer
Name and summary matches only, use "search all" for everything.
[xxx ~]# yum remove wireshark
Loaded plugins: fastestmirror, langpacks, nvidia
Resolving Dependencies
--> Running transaction check
---> Package wireshark.x86_64 0:1.10.14-25.el7 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Removing:
wireshark x86_64 1.10.14-25.el7 @base 67 M
Transaction Summary
================================================================================
Remove 1 Package
Installed size: 67 M
Is this ok [y/N]: y
Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Erasing : wireshark-1.10.14-25.el7.x86_64 1/1
Verifying : wireshark-1.10.14-25.el7.x86_64 1/1
Removed:
wireshark.x86_64 0:1.10.14-25.el7
Complete!
[xxx ~]# sudo yum install wireshark-gnome.x86_64
Loaded plugins: fastestmirror, langpacks, nvidia
Loading mirror speeds from cached hostfile
* base: centos.mirror.far.fi
* centos-sclo-rh: centos.mirror.far.fi
* centos-sclo-sclo: centos.mirror.far.fi
* epel: epel.mirror.serveriai.lt
* extras: centos.mirror.far.fi
* updates: centos.mirror.far.fi
Resolving Dependencies
--> Running transaction check
---> Package wireshark-gnome.x86_64 0:1.10.14-25.el7 will be installed
--> Processing Dependency: wireshark = 1.10.14-25.el7 for package: wireshark-gnome-1.10.14-25.el7.x86_64
--> Processing Dependency: libwsutil.so.3()(64bit) for package: wireshark-gnome-1.10.14-25.el7.x86_64
--> Processing Dependency: libwiretap.so.3()(64bit) for package: wireshark-gnome-1.10.14-25.el7.x86_64
--> Processing Dependency: libwireshark.so.3()(64bit) for package: wireshark-gnome-1.10.14-25.el7.x86_64
--> Running transaction check
---> Package wireshark.x86_64 0:1.10.14-25.el7 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
wireshark-gnome x86_64 1.10.14-25.el7 base 912 k
Installing for dependencies:
wireshark x86_64 1.10.14-25.el7 base 13 M
Transaction Summary
================================================================================
Install 1 Package (+1 Dependent package)
Total download size: 13 M
Installed size: 69 M
Is this ok [y/d/N]: y
Downloading packages:
(1/2): wireshark-gnome-1.10.14-25.el7.x86_64.rpm | 912 kB 00:01
(2/2): wireshark-1.10.14-25.el7.x86_64.rpm | 13 MB 00:03
--------------------------------------------------------------------------------
Total 4.4 MB/s | 13 MB 00:03
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
Installing : wireshark-1.10.14-25.el7.x86_64 1/2
Installing : wireshark-gnome-1.10.14-25.el7.x86_64 2/2
Verifying : wireshark-gnome-1.10.14-25.el7.x86_64 1/2
Verifying : wireshark-1.10.14-25.el7.x86_64 2/2
Installed:
wireshark-gnome.x86_64 0:1.10.14-25.el7
Dependency Installed:
wireshark.x86_64 0:1.10.14-25.el7
Complete!
[xxx ~]# sudo wireshark &
- 使用截圖
文章來源地址http://www.zghlxwxcb.cn/news/detail-681919.html
到了這里，關(guān)于Linux CentOS安裝抓包解包工具Wireshark圖形化界面的文章就介紹完了。如果您還想了解更多內(nèi)容，請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
