---
# System prepended metadata

title: Wireshark Networking Laboratory - Protocol Analysis
tags: [nätverk, Dator- och nätverksteknik]

---

# Wireshark Networking Laboratory - Protocol Analysis

###### tags: `Dator- och nätverksteknik` `nätverk`

**Objective:** In this laboratory we will learn to use Wireshark to analyze network traffic, identify protocols, and troubleshoot issues in various networking scenarios. The difficulty of the tasks will gradually increase, challenging students to develop their skills and apply their knowledge to a wide range of protocols.

**Prerequisites:** Basic understanding of networking concepts, familiarity with network protocols, and Wireshark installation on your computer.

**Materials:** A computer with Wireshark installed, and Internet access.

## Lab Outline

1. [Getting Started with Wireshark](#getting-started)
2. [Basic Protocol Analysis](#basic-protocol-analysis)

### 1. Getting Started with Wireshark
1. Introduction to Wireshark
2. Capturing live data
3. Saving and opening capture files
4. Wireshark interface overview

### 2. Basic Protocol Analysis
1. Analyzing ARP traffic
2. Analyzing DNS traffic
3. Identifying common protocols in a capture


## Betygskrav
+ Att ni dokumenterar det ni hittar och analyserar innehållet



## Tutorial: Installing Homebrew and Wireshark on macOS
0. If installing using the terminal does not work, contact me and we'll download it fromt the official website
    1. https://www.wireshark.org/download.html

1. Open Terminal (`command + spacebar` and search for it)
2. Install Homebrew by pasting the following command into Terminal and pressing Enter:
 
```bash
/bin/bash -c '$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)'
```
3. After Homebrew installation is complete, run the following command to ensure Homebrew is working properly:
```bash
brew doctor
```
4. Install Wireshark by running the following command:
```bash
brew install --cask wireshark
```
5. After installation is complete, you can run Wireshark by typing `wireshark` in the Terminal or by searching for it in the Applications folder. Or open it by searching for wireshark using `command + spacebar`. 

Note: For other operating systems, visit the [official Wireshark download page](https://www.wireshark.org/download.html) for installation instructions.

## Laboration instructions

+ How to navigate the GUI in wireshark: https://www.youtube.com/watch?v=9UxJUlBCuyE

**Answers only needs to be two sentences below.**

+ Questions to answer
    + What is an interface?
    + What is the different between loopback and wifi in the interface?
    + What is an IP-adress?
    + What is an MAC-adress?
    + Give examples of
        + Source and destination IP addresses
        + Source and destination port numbers
    + What does a packet contain?
    + What is the structure of a packet?