2022 Zhejiang secondary vocational group “ Cyberspace Security ” Encoding information acquisition and analysis

（ Full version ）

Preface

Wireshark It is the most widely used in the world 、 The best network packet analysis software , Powerful , The interface is friendly and intuitive , It's very convenient to operate . Its founder is Gerald Combs, Formerly known as Ethereal, As an open source project, it has become one of the most widely used security tools through the improvement of many developers . stay CTF It is also often used in wireshark Carry out traffic packet analysis , It can quickly detect network communication data , Get the most detailed information about the network .Wireshark Use WinPCAP As an interface , Data message exchange with network card directly . The user will browse these data in the graphical interface , Real-time monitoring TCP、session Other network dynamics , Easily complete network management .

What is data packet analysis

Packet sniffing or protocol analysis : Refers to the process of capturing and parsing data transmitted on the network , In order to better understand what is happening on the Internet .

wire0078.pcap

Encoding information acquisition