

The tab below, labelled “Columns,” allows you to select which columns will be displayed by Wireshark in the list of packets. The illustrations across the top allow you to select the positioning of the different panes, and the radio button selectors allow you to select the data that will go in each pane. You will now see different available layout options.

Click on “Layout” under “User Interface” on the side menu. That will open up a new window with more options. To get there, click on “Edit” then “Preferences…” at the bottom of the drop down. You can alter it in Wireshark’s “Preferences” menu. The sections can be expanded and contracted, but that stacked layout isn’t for everyone. For most uses, the top two are much more useful than the last, but can still be great information for more advanced users. The bottom section contains the raw packet bytes. The middle section is the packet details. They are listed separately by Kali.īy default, Wireshark has three sections stacked on top of one another. Despite their numbers, using them is fairly straightforward.

Wireshark offers a number of different layouts as well as options that configure the program’s behavior. Basic Configurationīefore you do anything else, it’s probably best to set Wireshark up the way you will be most comfortable using it. # apt install wireshark-gtkĭon’t worry if you’re running Kali on a live medium. So, the first step in using Wireshark is installing the wireshark-gtk package.

However, the wireshark-gtk package provides a nicer interface that makes working with Wireshark a much friendlier experience. Wireshark is incredibly powerful, and it can appear daunting at first, but it serves the single purpose of monitoring network traffic, and all of those many options that it makes available only serve to enhance it’s monitoring ability. Of course, this guide will cover monitoring your own network traffic to detect any potentially unwanted activity. Like the others, it can be used for either positive or negative purposes. Wireshark is just one of the valuable tools provided by Kali Linux.
