Wireshark is a frame capture and analysis tool that runs on Windows, Linux, and Mac OS X. It is a free, open-source program that you can download from http://www.wireshark.org.
It is a packet capture tool that can acquire data from different sources. For live packet capture, a Network Interface Card (NIC) is placed in promiscuous mode. In this mode, instead of accepting only broadcast or multicast frames, or frames addressed to its specific MAC address, the NIC reads in every frame it sees, whether addressed to it or not. The captured data can be analyzed offline by opening it with Wireshark.
In this video, you will learn how to use Wireshark, and learn about the difference between capture filter vs display filter, preferences, and profiles. Try it Now!