Analyzing Live Traffic Using Wireshark

Wireshark is a well known network protocol analyzer and one of many applications used for network protocol analysis. 

Wireshark can interactively browse packet data from a live network or from a previously saved pcap file.

Figure 16-2 - Wireshark Interface

Note: You can download Wireshark from https://www.wireshark.org/

For more information on using Wireshark, please refer to the official documentation on the www.wireshark.org web site.

To use Wireshark to decode a previously saved packet flow capture file, export the pcap file from the switch and analyze it with Wireshark.

Note: The path to a Netvisor ONE switch pcap file is:   /net/<ServerSw_Name>/ONVL/global/flow/<Flow_Name>/<Switch_Name>/pcap