Read a packet capture
Inspect packets in the bundled training capture.
tshark -r sample.pcapExplore packet analysis with Wireshark online. Use TShark to inspect a sample capture, apply display filters, and understand protocols before opening the graphical analyzer.
Start here
Load a task into the terminal, then press Enter to see the result. Each example works in the introductory session on this page.
Inspect packets in the bundled training capture.
tshark -r sample.pcapDisplay only DNS traffic from the training capture.
tshark -r sample.pcap -Y dnsRead the size and packet count of the example capture.
capinfos sample.pcapRead only the HTTP request in the sample capture.
tshark -r sample.pcap -Y httpLimit capture output to one packet.
tshark -r sample.pcap -c 1Print one selected protocol field for each packet.
tshark -r sample.pcap -T fields -e ip.srcSummarize the protocols in the sample capture.
tshark -r sample.pcap -q -z io,phsInspect the sample TShark command-line analyzer version.
tshark --versionNo setup needed
Explore packet analysis with Wireshark online. Use TShark to inspect a sample capture, apply display filters, and understand protocols before opening the graphical analyzer.
Start with the short command exercises above. When you are ready for a project, open the linked LabEx lab to work with real tools in an online Linux environment, with step-by-step guidance and immediate feedback.
Keep learning
Build on your Wireshark experiments with a structured skill tree. Explore the skills, choose a guided lab, and practice each concept in an online environment.
Wireshark supports detailed protocol inspection, live capture, offline packet analysis, display filters, and data export. These features help network engineers, security analysts, and developers investigate traffic and troubleshoot network behavior.
Learn packet-analysis workflows from your browser without setting up Wireshark locally. Try the supported packet examples here, then sign in to the linked lab for real captures and analysis in its hosted learning environment.
LabEx combines a hosted lab with guided capture, configuration, filtering, and traffic-analysis exercises, plus a Wireshark Skill Tree. Follow the lab’s installation steps and use its available desktop or terminal interfaces; the guest preview is not a full Wireshark application.
Yes. Practice protocol inspection, troubleshooting, and security-analysis techniques with training captures and authorized traffic. Use the real lab for deeper analysis, and choose datasets and exercises that match the network problems you want to understand.
Yes. Begin by opening a capture, identifying common protocols, and applying simple display filters. Guided labs explain packet fields and help you connect the traffic you see with familiar network operations.
Follow the Wireshark Skill Tree, practice capture and display filters, and compare packet conversations for different protocols. Use the lab’s capture files, record your findings, and repeat troubleshooting exercises with a specific question to investigate.
Your next step
Continue with real tools, guided labs, and Labby assistance.