what…

What Wireshark will do:

  • Wireshark will let you see ALL the traffic that passes you capture device (assuming that device copes with the amount of traffic and is able to hand it to Wireshark for logging)

What Wireshark will NOT do:

  • Wireshark will NOT display the data captured in a nice-to-read format for you. You ┬ámust have at least a basic understanding of how the different protocols in your trace file works.
    Remeber that all the packets you look at represent EVERYTHING that has been sent to/from your capture device over the network during the trace.