Capture

One of my favorite ways to teach Wireshark to beginners is to have students download and install Wireshark, bring up a terminal window, and capture the traffic after they launch Nmap. As you learned in Chapter 3, “Nmap: The Network Mapper,” good guys as well as bad guys use it. If you can recognize what Nmap traffic looks like and you know that you're not the one running it, then odds are it is someone attempting to map out your network.

---

LAB 7.1:ZENMAP AND WIRESHARK

---

NOTE

You will need to use three tools to make this lab work: a terminal window, Zenmap, and Wireshark. I am running this lab on a Windows 10 machine where I can open a command shell. You used Zenmap in Chapter 3. You can download Wireshark from www.wireshark.org.

---

1. Open a terminal window. Run the following command: ipconfig /all. Look for the IP address on your Wi‐Fi network interface card.
2. Open Zenmap. In the Target field, add the IP address identified in the previous step. In the Profile...