Lab: Wireshark — Capturing and Filtering Live Traffic
🔬 Lab Practical — CSF & NS Practical 1 | Est. time: 3 hrs
🎯 Objective
Capture live network traffic, apply display filters, identify HTTP credentials and DNS queries.
📋 Prerequisites
- Lab machine with internet access
- Wireshark installed
📝 Procedure
- Start live capture on active interface
- Browse websites to generate traffic (2-3 min)
- Apply filters:
http,dns,tcp.port == 80 - Right-click HTTP packet → Follow → TCP Stream
- Filter
dns→ examine third-party domains - Statistics → Protocol Hierarchy
✅ Expected Output
- TCP Stream screenshot (HTTP request/response)
- DNS query list
- Protocol Hierarchy statistics
💭 Observation Questions
- Why can Wireshark see HTTP form data in plaintext? What prevents this?
- Which third-party domains appear in DNS queries besides the sites you visited?
🔗 Related
- Wireshark | Cheatsheet ⚡