Can anyone tell me the offline use of wireshark. I am using it for networking purpose but its online so need to know about the each n every case of offline where we can use wireshark. Thanx in advance... asked 21 Aug '13, 03:39  Eagle Eye |
One Answer:
What do you mean by Online/offline? You can use Wireshark to do live captures or to load capture files that has been taken previously on the capture files you can do more or less the same operations. If yo mean access to the internet that's not needed other than to reach help pages and update the SW. answered 21 Aug '13, 07:41  Anders ♦ |
By word 'online' I mean when you configure your wireshark for any particular node/protocol and you capture the output in heavy running traffic. this online has no relation with "INTERNET" :)
When doing live captures with Wireshark the GUI may have eproblems keeping up with heavy traffic especially if you have "Update list of packets in realtime" and "Automatic scrolling in live capture" preferences set. It may be better to stop the capture before starting to do analyse or use dumpcap or tshark for live captures and use Wireshark to analyse the captured files - offline in your nomenclature I suppose.