
Expand Ethernet II to view Ethernet details.Notice that it is an Ethernet II / Internet Protocol Version 4 / Transmission Control Protocol frame. Observe the packet details in the middle Wireshark packet details pane.
The first three packets (TCP SYN, TCP SYN/ACK, TCP ACK) are the TCP three way handshake.
Observe the traffic captured in the top Wireshark packet list pane. To view all related traffic for this connection, change the filter to ip.addr =, where is the destination address of the HTTP packet.Īctivity 3 - Analyze TCP Connection Traffic. Select the first HTTP packet labeled GET /. To view only HTTP traffic, type http (lower case) in the Filter box and press Enter. Navigate to the website found in your search.Īctivity 2 - Select Destination Traffic. Search the Internet for an http (rather than https) website. These activities will show you how to use Wireshark to capture and analyze Hypertext Transfer Protocol ( HTTP) traffic.Īctivity 1 - Capture HTTP Traffic Wireshark is a free and open source packet analyzer used for network troubleshooting and analysis.
9 Activity 7 - Analyze HTTP Response Traffic.8 Activity 6 - Analyze HTTP Request Traffic.7 Activity 5 - Analyze HTTP Response Traffic.6 Activity 4 - Analyze HTTP Request Traffic.5 Activity 3 - Analyze TCP Connection Traffic.4 Activity 2 - Select Destination Traffic.