This is why most chat apps use end-to-end encryption and most websites these days use https (instead of http). Anyone on the same network as you can sniff the packets and see the username and password in the RAW data.

Imagine that you are logging into a website that does not use HTTPS. This is why end-to-end encryption is important You can also see the RAW data of that particular pack at the bottom as shown in the image below. After clicking on a particular packet, you can see the information about the different layers of the TCP/IP protocol associated with it. Now you can select any package to check that particular package. Next I tried using ping command in terminal and as you can see a lot of packets were captured. Just press and hold the button CONTROLwhile clicking the interfaces you want to capture to and from and then press the button Start capturing packetsicon as marked in the image below. You can also capture packets to and from multiple interfaces at the same time. Next, to start capturing packets, you need to select the interface (which in my case is ens33) and click the button Start capturing packetsicon as marked in the image below. Depending on your preferences, you can choose to display specific types of interfaces on the welcome screen from the marked area in the image below.įor example, I listed only the cablingnetwork interfaces. There are many types of interfaces available that you can monitor using Wireshark, such as wired, external devices, etc. When you start Wireshark, you'll see a list of interfaces that you can use to capture packets to and from.

To start from the CLI, just type wire sharkin your console:įrom graphical user interfaceSearch for Wireshark app in the search bar and hit enter. Launching the Wireshark application can be done from the application launcher or the CLI. The developers had to change their name to Wireshark in 2006 due to trademark issues.

First released in 1998, Wireshark was initially known as Ethereal.

Wireshark for linux ubuntu