One way to optimize packet capture is to use a command line tool. Lisa Bock demonstrates using tshark and dumpcap, both CLI tools that behave in the same way. However, dumpcap is the more efficient CLI packet capture tool.
- [Instructor] One way to optimize packet capture…is to use a command line interface tool.…Tshark and dumpcap are both command line interface tools,…but what's the difference?…Let's take a look.…I'm at the command line interface,…and you'll most likely want to run as administrator.…We need to navigate to the Wireshark folder,…and we'll begin by putting the command dumpcap with a dash D…to see the interfaces.…
Now there's my interfaces,…and I want to use wi-fi,…so I can simply reference four.…So let's put the command in,…and we're going to capture 200 packets…and save it to my temp drive.…All right, there's the command,…and as you see, once it's done,…it will write it out to that C drive…in the temporary folder.…All right, that's done.…And as you see that it natively tells us,…well, how many packets were lost,…and we have 100% of packets.…
Tshark's pretty much the same,…and we'll write it again to the C drive.…Same variables.…We'll let that run.…Okay, that's done.…Now let's go take a look.…Well, they're in here.…We see shark.pcap next generation and dumpcap,…
- Tapping into the network
- Baselining the network
- Troubleshooting to discover the cause of a slow network
- Merging traffic
- Sanitizing packet captures
- Capture engines
- Optimizing packet captures
- Basic and advanced IO graphs
- TCP stream graphs
Skill Level Intermediate
Enhance your skills1m 5s
1. Tapping into the Stream
2. Solving Network Problems
3. Capture Engines and Wi-Fi
4. Command Line Capture
5. IO and Stream Graphs
What's next?1m 13s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.