Computer Science / Wireshark

Packet Sniffing with Wireshark: Create Your First Filters

Brought by: Coursera

Overview

This guided project, Packet Sniffing with Wireshark: Create Your First Filters, will help an intermediate security analyst who is looking to use packet sniffing with Wireshark to capture, display, and observe specific HTTP and HTTPS packets. In this 1.5-hour long project-based course, you will learn how to use Wireshark for packet sniffing; to capture and observe certain network packets using display filters and capture filters.

To achieve this, you will be taking on the role of helping an IT manager who wants to detect unwanted network traffic on their server and enforce a web surfing policy. Your task is to demonstrate Wireshark’s packet sniffing capabilities.

In order to be successful in this project, you will need some basic Linux Command Line Knowledge and some exposure to Computer Networks.

Syllabus

Project Overview

In this guided project, you will learn how to use Wireshark for packet sniffing; to capture and observe certain network packets using display filters and capture filters.

Taught by

David Dalsveen

Computer Science / Wireshark

Packet Sniffing with Wireshark: Create Your First Filters

Packet Sniffing with Wireshark: Create Your First Filters

Brought by: Coursera

Coursera
Paid
English
Certificate Available
Available at any time
intermediate
English

Messages Timeline Exceptions Views14 Route Queries7 Models6 Gate Session Request

8.1.2199ms2MBGET en/courses/{slug}

Booting (120ms)
Application (79.15ms)
1 x Booting (60.06%)
119.75ms
1 x Application (39.7%)
79.15ms

14 templates were rendered

public.courses.show (resources/views/public/courses/show.blade.php)3bladefile
Params
0
course
1
links
2
config
public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
classes
public.courses.partials.details (resources/views/public/courses/partials/details.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
classes
public.layouts.main (resources/views/public/layouts/main.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.layouts.partials.meta (resources/views/public/layouts/partials/meta.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.layouts.partials.navbar (resources/views/public/layouts/partials/navbar.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.auth.profile.partials.links (resources/views/public/auth/profile/partials/links.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.layouts.partials.flash-session (resources/views/public/layouts/partials/flash-session.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config

uri: GET en/courses/{slug}
middleware: web, localize:en
controller: App\Http\Controllers\CourseController@show
as: en.courses.show
namespace
prefix: /en
where
file: app/Http/Controllers/CourseController.php:17-35

7 statements were executed5.05ms

select * from `courses` where `slug_en` = 'packet-sniffing-with-wireshark:-create-your-first-filters' limit 1

3.64ms/app/Http/Controllers/CourseController.php:20corspedia

Metadata
Bindings	0. packet-sniffing-with-wireshark:-create-your-first-filters
Backtrace	17. /app/Http/Controllers/CourseController.php:20 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

update `courses` set `visitors` = `visitors` + 1, `courses`.`updated_at` = '2025-04-15 22:34:19' where `id` = 1417

500μs/app/Http/Controllers/CourseController.php:21corspedia

Metadata
Bindings	0. 2025-04-15 22:34:19 1. 1417
Backtrace	17. /app/Http/Controllers/CourseController.php:21 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select `id`, `name_en`, `name_ar`, `topic_id`, `slug_en`, `slug_ar` from `subjects` where `subjects`.`id` in (116)

180μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	20. /app/Http/Controllers/CourseController.php:23 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select `id`, `name_en`, `name_ar`, `slug_en`, `slug_ar` from `topics` where `topics`.`id` in (1)

160μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	25. /app/Http/Controllers/CourseController.php:23 26. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 27. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 28. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 29. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select * from `institutions` where `institutions`.`id` in (106) and `institutions`.`deleted_at` is null

190μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	20. /app/Http/Controllers/CourseController.php:23 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select * from `providers` where `providers`.`id` in (2) and `providers`.`deleted_at` is null

180μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	20. /app/Http/Controllers/CourseController.php:23 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select * from `html_files` where `html_files`.`id` = 1410 limit 1

200μs/app/Models/Course.php:84corspedia

Metadata
Bindings	0. 1410
Backtrace	21. /app/Models/Course.php:84 28. view::public.courses.show:29 30. /vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:125 31. /vendor/laravel/framework/src/Illuminate/View/Engines/PhpEngine.php:58 32. /vendor/laravel/framework/src/Illuminate/View/Engines/CompilerEngine.php:72

App\Models\HtmlFile: 1
App\Models\Provider: 1
App\Models\Institution: 1
App\Models\Topic: 1
App\Models\Subject: 1
App\Models\Course: 1

_token: BHQPgeWstsNeXINsoCtRtmZnrvLpCdzOnGnSPmxu
locale: en
_previous: array:1 [ "url" => "https://www.corspedia.com/en/courses/packet-sniffing-with-wireshark:-create-yo...
_flash: array:2 [ "old" => [] "new" => [] ]
PHPDEBUGBAR_STACK_DATA: []

path_info

/en/courses/packet-sniffing-with-wireshark:-create-your-first-filters

status_code

status_text

OK

format

html

content_type

text/html; charset=UTF-8

request_query

[]

request_request

[]

request_headers

  0 of 0   
array:24 [▼
  "cf-ipcountry" => array:1 [▶
    0 => "US"
  ]
  "cf-connecting-ip" => array:1 [▶
    0 => "18.191.254.51"
  ]
  "cdn-loop" => array:1 [▶
    0 => "cloudflare; loops=1"
  ]
  "x-forwarded-proto" => array:1 [▶
    0 => "https"
  ]
  "cf-visitor" => array:1 [▶
    0 => "{"scheme":"https"}"
  ]
  "sec-fetch-site" => array:1 [▶
    0 => "none"
  ]
  "accept" => array:1 [▶
    0 => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
  ]
  "user-agent" => array:1 [▶
    0 => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
  ]
  "upgrade-insecure-requests" => array:1 [▶
    0 => "1"
  ]
  "sec-ch-ua-platform" => array:1 [▶
    0 => ""Windows""
  ]
  "sec-ch-ua-mobile" => array:1 [▶
    0 => "?0"
  ]
  "sec-ch-ua" => array:1 [▶
    0 => ""HeadlessChrome";v="129", "Not=A?Brand";v="8", "Chromium";v="129""
  ]
  "cache-control" => array:1 [▶
    0 => "no-cache"
  ]
  "pragma" => array:1 [▶
    0 => "no-cache"
  ]
  "sec-fetch-dest" => array:1 [▶
    0 => "document"
  ]
  "cf-ray" => array:1 [▶
    0 => "930ee8db788fef0a-ORD"
  ]
  "accept-encoding" => array:1 [▶
    0 => "gzip, br"
  ]
  "priority" => array:1 [▶
    0 => "u=0, i"
  ]
  "sec-fetch-user" => array:1 [▶
    0 => "?1"
  ]
  "sec-fetch-mode" => array:1 [▶
    0 => "navigate"
  ]
  "x-forwarded-for" => array:1 [▶
    0 => "18.191.254.51"
  ]
  "host" => array:1 [▶
    0 => "www.corspedia.com"
  ]
  "content-length" => array:1 [▶
    0 => ""
  ]
  "content-type" => array:1 [▶
    0 => ""
  ]
]

request_server

  0 of 0   
array:50 [▼
  "USER" => "www-data"
  "HOME" => "/var/www"
  "HTTP_CF_IPCOUNTRY" => "US"
  "HTTP_CF_CONNECTING_IP" => "18.191.254.51"
  "HTTP_CDN_LOOP" => "cloudflare; loops=1"
  "HTTP_X_FORWARDED_PROTO" => "https"
  "HTTP_CF_VISITOR" => "{"scheme":"https"}"
  "HTTP_SEC_FETCH_SITE" => "none"
  "HTTP_ACCEPT" => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
  "HTTP_USER_AGENT" => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
  "HTTP_UPGRADE_INSECURE_REQUESTS" => "1"
  "HTTP_SEC_CH_UA_PLATFORM" => ""Windows""
  "HTTP_SEC_CH_UA_MOBILE" => "?0"
  "HTTP_SEC_CH_UA" => ""HeadlessChrome";v="129", "Not=A?Brand";v="8", "Chromium";v="129""
  "HTTP_CACHE_CONTROL" => "no-cache"
  "HTTP_PRAGMA" => "no-cache"
  "HTTP_SEC_FETCH_DEST" => "document"
  "HTTP_CF_RAY" => "930ee8db788fef0a-ORD"
  "HTTP_ACCEPT_ENCODING" => "gzip, br"
  "HTTP_PRIORITY" => "u=0, i"
  "HTTP_SEC_FETCH_USER" => "?1"
  "HTTP_SEC_FETCH_MODE" => "navigate"
  "HTTP_X_FORWARDED_FOR" => "18.191.254.51"
  "HTTP_HOST" => "www.corspedia.com"
  "REDIRECT_STATUS" => "200"
  "SERVER_NAME" => "corspedia.com"
  "SERVER_PORT" => "443"
  "SERVER_ADDR" => "141.95.147.152"
  "REMOTE_USER" => ""
  "REMOTE_PORT" => "41474"
  "REMOTE_ADDR" => "172.69.17.123"
  "SERVER_SOFTWARE" => "nginx/1.18.0"
  "GATEWAY_INTERFACE" => "CGI/1.1"
  "HTTPS" => "on"
  "REQUEST_SCHEME" => "https"
  "SERVER_PROTOCOL" => "HTTP/2.0"
  "DOCUMENT_ROOT" => "/var/www/corspedia/public"
  "DOCUMENT_URI" => "/index.php"
  "REQUEST_URI" => "/en/courses/packet-sniffing-with-wireshark:-create-your-first-filters"
  "SCRIPT_NAME" => "/index.php"
  "CONTENT_LENGTH" => ""
  "CONTENT_TYPE" => ""
  "REQUEST_METHOD" => "GET"
  "QUERY_STRING" => ""
  "SCRIPT_FILENAME" => "/var/www/corspedia/public/index.php"
  "PATH_INFO" => ""
  "FCGI_ROLE" => "RESPONDER"
  "PHP_SELF" => "/index.php"
  "REQUEST_TIME_FLOAT" => 1744756459.0379
  "REQUEST_TIME" => 1744756459
]

request_cookies

[]

response_headers

  0 of 0   
array:5 [▼
  "content-type" => array:1 [▶
    0 => "text/html; charset=UTF-8"
  ]
  "cache-control" => array:1 [▶
    0 => "no-cache, private"
  ]
  "date" => array:1 [▶
    0 => "Tue, 15 Apr 2025 22:34:19 GMT"
  ]
  "set-cookie" => array:2 [▶
    0 => "XSRF-TOKEN=eyJpdiI6ImNkMUVUbWpDT25WOEdha3RqQjRoSGc9PSIsInZhbHVlIjoieTRSWmQ0enJYbVowbytWSmxhY0xWM2VadkFpcmJ5NEVyQlZWTWFYTDNOUlZXQ3IvdTErQlQyNnVXQkdxV1JsdG9ZRzhtZFk4NXd2YTV3Qzh2UTg3NlM1QjhjeDA0UDB3ay9TNFFUNzh6ektFa0lIVDh1cjBqeENHQU5FRktOKzEiLCJtYWMiOiJiNWNjNGFlNThkY2JmY2VhZjQ1OTQ2OTMyMWNmOTA4MDRkNmMyOTM3N2MxMmRlM2YyZjNhNzY4N2VlYzczOTk1IiwidGFnIjoiIn0%3D; expires=Wed, 16 Apr 2025 00:34:19 GMT; Max-Age=7200; path=/; samesite=lax ◀XSRF-TOKEN=eyJpdiI6ImNkMUVUbWpDT25WOEdha3RqQjRoSGc9PSIsInZhbHVlIjoieTRSWmQ0enJYbVowbytWSmxhY0xWM2VadkFpcmJ5NEVyQlZWTWFYTDNOUlZXQ3IvdTErQlQyNnVXQkdxV1JsdG9ZRzhtZ ▶"
    1 => "laravel_session=eyJpdiI6IjJWUEswRVRsUWt6cm41anJBYy9KZ2c9PSIsInZhbHVlIjoibXB2RUgxSmVydjJlZmNka3JnSFJXSUFWMUUvVmlhRHNLSUtIOHpaemN5Y0NRdHNIUzBOL2ppRzJSQjVNa0RGWnVZN3IxMER5TVdhVmpabEtPM2dsbDBtVVBjSTJOd3IyL21YdkFneWtKRXdOSHhTOXMzZml1eEtXUnEwUEd6cTIiLCJtYWMiOiJiMjQ5MzgxNjkzZGMwODYwNTg5Y2U0N2IzM2VmZTYyM2EwZmYyNDAyOTU3MjY3OWMxNzI0Nzk0ZTkyMjc4MzRmIiwidGFnIjoiIn0%3D; expires=Wed, 16 Apr 2025 00:34:19 GMT; Max-Age=7200; path=/; httponly; samesite=lax ◀laravel_session=eyJpdiI6IjJWUEswRVRsUWt6cm41anJBYy9KZ2c9PSIsInZhbHVlIjoibXB2RUgxSmVydjJlZmNka3JnSFJXSUFWMUUvVmlhRHNLSUtIOHpaemN5Y0NRdHNIUzBOL2ppRzJSQjVNa0RGWnVZ ▶"
  ]
  "Set-Cookie" => array:2 [▶
    0 => "XSRF-TOKEN=eyJpdiI6ImNkMUVUbWpDT25WOEdha3RqQjRoSGc9PSIsInZhbHVlIjoieTRSWmQ0enJYbVowbytWSmxhY0xWM2VadkFpcmJ5NEVyQlZWTWFYTDNOUlZXQ3IvdTErQlQyNnVXQkdxV1JsdG9ZRzhtZFk4NXd2YTV3Qzh2UTg3NlM1QjhjeDA0UDB3ay9TNFFUNzh6ektFa0lIVDh1cjBqeENHQU5FRktOKzEiLCJtYWMiOiJiNWNjNGFlNThkY2JmY2VhZjQ1OTQ2OTMyMWNmOTA4MDRkNmMyOTM3N2MxMmRlM2YyZjNhNzY4N2VlYzczOTk1IiwidGFnIjoiIn0%3D; expires=Wed, 16-Apr-2025 00:34:19 GMT; path=/ ◀XSRF-TOKEN=eyJpdiI6ImNkMUVUbWpDT25WOEdha3RqQjRoSGc9PSIsInZhbHVlIjoieTRSWmQ0enJYbVowbytWSmxhY0xWM2VadkFpcmJ5NEVyQlZWTWFYTDNOUlZXQ3IvdTErQlQyNnVXQkdxV1JsdG9ZRzhtZ ▶"
    1 => "laravel_session=eyJpdiI6IjJWUEswRVRsUWt6cm41anJBYy9KZ2c9PSIsInZhbHVlIjoibXB2RUgxSmVydjJlZmNka3JnSFJXSUFWMUUvVmlhRHNLSUtIOHpaemN5Y0NRdHNIUzBOL2ppRzJSQjVNa0RGWnVZN3IxMER5TVdhVmpabEtPM2dsbDBtVVBjSTJOd3IyL21YdkFneWtKRXdOSHhTOXMzZml1eEtXUnEwUEd6cTIiLCJtYWMiOiJiMjQ5MzgxNjkzZGMwODYwNTg5Y2U0N2IzM2VmZTYyM2EwZmYyNDAyOTU3MjY3OWMxNzI0Nzk0ZTkyMjc4MzRmIiwidGFnIjoiIn0%3D; expires=Wed, 16-Apr-2025 00:34:19 GMT; path=/; httponly ◀laravel_session=eyJpdiI6IjJWUEswRVRsUWt6cm41anJBYy9KZ2c9PSIsInZhbHVlIjoibXB2RUgxSmVydjJlZmNka3JnSFJXSUFWMUUvVmlhRHNLSUtIOHpaemN5Y0NRdHNIUzBOL2ppRzJSQjVNa0RGWnVZ ▶"
  ]
]

session_attributes

  0 of 0   
array:5 [▼
  "_token" => "BHQPgeWstsNeXINsoCtRtmZnrvLpCdzOnGnSPmxu"
  "locale" => "en"
  "_previous" => array:1 [▶
    "url" => "https://www.corspedia.com/en/courses/packet-sniffing-with-wireshark:-create-your-first-filters"
  ]
  "_flash" => array:2 [▶
    "old" => []
    "new" => []
  ]
  "PHPDEBUGBAR_STACK_DATA" => []
]