{"id":3618,"date":"2026-10-27T17:45:19","date_gmt":"2026-10-27T12:15:19","guid":{"rendered":"https:\/\/nuventure.com\/blog\/?p=3618"},"modified":"2026-10-27T17:46:26","modified_gmt":"2026-10-27T12:16:26","slug":"wireshark-tshark-network-capture","status":"publish","type":"post","link":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/","title":{"rendered":"Network Capturing\u00a0 and the Risks of Unencrypted Protocols\u00a0"},"content":{"rendered":"\n<p>Network capturing is a fundamental process in cybersecurity and network diagnostics, involving the interception and analysis of data packets as they move across a network. Tools like <strong>Wireshark<\/strong> and <strong>TShark<\/strong> are at the forefront of this practice, empowering network administrators, security professionals, and developers to monitor traffic, troubleshoot issues, and understand how systems communicate.&nbsp;<\/p>\n\n\n\n<p>In this blog, we will delve into capturing network traffic using both Wireshark (a graphical interface) and TShark (a command-line equivalent). Along the way, we will highlight real-world examples of session decoding and attack detection, while discussing the inherent risks posed by unencrypted protocols.&nbsp;<\/p>\n\n\n\n<p><strong>Network Layers and Capturing Traffic<\/strong>&nbsp;<\/p>\n\n\n\n<p>When a user interacts with an application that sends or receives data, they are engaging at the application layer of the OSI model. However, network traffic moves through multiple layers as it traverses between the client and the server. Wireshark enables you to capture this traffic, allowing for deep inspection of the different layers.&nbsp;<\/p>\n\n\n\n<p>Wireshark captures traffic at various OSI layers, including:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Layer 2<\/strong>: Data Link Layer (Ethernet frames)&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Layer 3<\/strong>: Network Layer (IP packets)&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Layer 4<\/strong>: Transport Layer (TCP\/UDP segments)&nbsp;<\/li>\n<\/ul>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Layer 7<\/strong>: Application Layer (HTTP, DNS, etc.)&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>By analyzing the traffic across these layers, you can uncover valuable details about the nature of the communication.&nbsp;<\/p>\n\n\n\n<p><strong>Example 1: Decoding a Session with Wireshark<\/strong>&nbsp;<\/p>\n\n\n\n<p>Let\u2019s walk through decoding a simple HTTP session using Wireshark.&nbsp;<\/p>\n\n\n\n<p>Capture the Traffic&nbsp;<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Open Wireshark (GUI) and begin capturing traffic on the desired network interface.&nbsp;<\/li>\n<\/ol>\n\n\n\n<ol start=\"2\" class=\"wp-block-list\">\n<li>In your browser, visit an HTTP website (e.g., http:\/\/siteurl.com).&nbsp;<\/li>\n<\/ol>\n\n\n\n<p><strong>Filter for HTTP Traffic&nbsp;<\/strong><\/p>\n\n\n\n<p>Once the capture is complete, use the filter http to isolate relevant traffic. This helps to narrow down the capture, showing only HTTP packets, and allowing you to focus on requests and response.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"781\" height=\"108\" src=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_01-1.png\" alt=\"Filter for HTTP Traffic\u00a0\" class=\"wp-image-3624\" srcset=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_01-1.png 781w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_01-1-300x41.png 300w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_01-1-768x106.png 768w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_01-1-600x83.png 600w\" sizes=\"auto, (max-width: 781px) 100vw, 781px\" \/><\/figure><\/div>\n\n\n<p><strong>Examine the Packets&nbsp;<\/strong><\/p>\n\n\n\n<p>Select any packet to view its details. You will see request methods (e.g., GET or POST), response status codes (e.g., 200 OK), and session details such as the URL requested and cookies. This provides deep insight into the traffic flow and the data exchanged between client and server.&nbsp;<\/p>\n\n\n\n<p><strong>TShark Equivalent<\/strong>&nbsp;<\/p>\n\n\n\n<p>TShark offers similar functionality through the command line. To capture and filter HTTP traffic, use the command:&nbsp;<br><\/p>\n\n\n\n<p>For AlmaLinux (or any RHEL-based distribution like CentOS):&nbsp;<br><strong># sudo dnf install wireshark-cl<\/strong>i<br><\/p>\n\n\n\n<p>For Debian\/Ubuntu:&nbsp;<br><strong># sudo apt install tshark<\/strong><br><\/p>\n\n\n\n<p>Then issue the command to filter the traffic:&nbsp;<br><strong># tshark -i &lt;eth0 or the specific interface you want to capture&gt; -Y http -w capture.pcap<\/strong><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>This command saves the capture to a file (capture.pcap) for further analysis.&nbsp;<\/p>\n\n\n\n<p><strong>Analysis<\/strong>&nbsp;<\/p>\n\n\n\n<p>One of the primary risks of using unencrypted protocols like HTTP is that sensitive information\u2014such as credentials and cookies\u2014can be exposed in plain text. Attackers can easily capture and read this data, leading to potential breaches.&nbsp;<\/p>\n\n\n\n<p><strong>Example 2: Identifying a Denial of Service (DoS) Attack<\/strong>&nbsp;<\/p>\n\n\n\n<p>A common network attack is the <strong>SYN flood<\/strong>, a type of DoS attack. In this example, we will detect such an attack using Wireshark.&nbsp;<\/p>\n\n\n\n<p><strong>Capture the Attack\u00a0<\/strong><\/p>\n\n\n\n<p>A SYN flood involves an attacker sending numerous SYN packets to initiate TCP handshakes but never completing them. Begin capturing traffic on your network interface.&nbsp;<\/p>\n\n\n\n<p><strong>Filter for TCP SYN Packets\u00a0<\/strong><\/p>\n\n\n\n<p>Use the following Wireshark filter to isolate TCP SYN packets:<\/p>\n\n\n\n<p><strong>tcp.flags.syn == 1 and tcp.flags.ack == 0<\/strong>&nbsp;<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"782\" height=\"218\" src=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_02.jpg\" alt=\"Filter for TCP SYN Packets\u00a0\" class=\"wp-image-3629\" srcset=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_02.jpg 782w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_02-300x84.jpg 300w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_02-768x214.jpg 768w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_02-600x167.jpg 600w\" sizes=\"auto, (max-width: 782px) 100vw, 782px\" \/><\/figure><\/div>\n\n\n<p>This filter helps you focus on packets where the SYN flag is set but the ACK flag is not, indicating incomplete handshakes.&nbsp;<\/p>\n\n\n\n<p><strong><\/strong>&nbsp;<br><strong>Analyze the IPs<\/strong>&nbsp;<\/p>\n\n\n\n<p>Look for an unusually high number of SYN packets from a single source IP. This is a tell-tale sign of a SYN flood attack, as the target server becomes overwhelmed by the incomplete connection attempts.&nbsp;<\/p>\n\n\n\n<p><strong>TShark Equivalent<\/strong>&nbsp;<\/p>\n\n\n\n<p>For TShark, use the following command to analyze the capture and identify the source of the SYN flood:&nbsp;<\/p>\n\n\n\n<p># <strong>tshark -r capture.pcap -Y &#8220;tcp.flags.syn==1 and tcp.flags.ack==0&#8221; -T fields -e ip.src -e tcp.dstport | sort | uniq -c | sort -n<\/strong><\/p>\n\n\n\n<p>This command filters SYN packets, extracts source IP addresses and destination ports, and sorts them by frequency, making it easy to spot anomalies.&nbsp;<\/p>\n\n\n\n<p><strong>Analysis<\/strong>&nbsp;<\/p>\n\n\n\n<p>By inspecting the captured packets, you can identify the attacking IP addresses, the target ports, and the overall scale of the attack. Responding to such insights can help mitigate the impact of the attack and protect network resources.&nbsp;<\/p>\n\n\n\n<p><strong>The Risks of Unencrypted Protocols<\/strong>&nbsp;<\/p>\n\n\n\n<p>Unencrypted protocols such as <strong>HTTP<\/strong>, <strong>FTP<\/strong>, and the usage of <strong>Telnet<\/strong> expose sensitive data that can be easily captured by malicious actors using tools like Wireshark or TShark. With the ability to view credentials, session tokens, and other private information in plain text, attackers can exploit these weaknesses for man-in-the-middle attacks, credential theft, or session hijacking.&nbsp;<\/p>\n\n\n\n<p><strong>Effects<\/strong>&nbsp;<\/p>\n\n\n\n<p>Capture HTTP\/FTP\/Telnet\/SNMP\/DB traffic to get passwords. No introduction is certainly needed for the Hypertext Transfer Protocol (HTTP). It usually works on port 80\/TCP, and as it is a text protocol, it does not give the communication parties much or no privacy. Anyone who\u2019s able to communicate can catch everything, including passwords, via that channel.&nbsp;<\/p>\n\n\n\n<p>While all major browser vendors have made considerable efforts to prevent the use of HTTP as far as possible, during penetration testing, HTTP can be used on internal media. Here is an example of login credentials captured in a POST request in an HTTP communication:&nbsp;<\/p>\n\n\n\n<p><strong>Demonstration using Wireshark<\/strong><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"681\" height=\"550\" src=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_03.jpg\" alt=\"Demonstration using Wireshark\" class=\"wp-image-3630\" srcset=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_03.jpg 681w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_03-300x242.jpg 300w, https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Network-Capturing_03-600x485.jpg 600w\" sizes=\"auto, (max-width: 681px) 100vw, 681px\" \/><\/figure><\/div>\n\n\n<p>The above capture from Wireshark clearly indicates a password being intercepted. Similarly, capturing traffic for insecure protocols like HTTP, FTP, Telnet, SNMP v1\/v2c, and unencrypted database connections clearly demonstrates the risk of transmitting sensitive information without encryption.&nbsp;<\/p>\n\n\n\n<p><strong>Secure Alternatives<\/strong>&nbsp;<\/p>\n\n\n\n<p>Secure alternatives such as <strong>HTTPS<\/strong>, <strong>FTPS\/SFTP<\/strong>, <strong>SSH<\/strong>, <strong>SNMP v3<\/strong>, and <strong>SSL\/TLS<\/strong> for database communication protect this data by encrypting it, making it inaccessible even when intercepted.&nbsp;<\/p>\n\n\n\n<p>References&nbsp;&nbsp;<\/p>\n\n\n\n<p>\u2022 https:\/\/www.hackingarticles.in\/network-packet-forensic-using-wireshark\/&nbsp;&nbsp;<\/p>\n\n\n\n<p>\u2022 https:\/\/www.hackingarticles.in\/wireshark-for-pentester-password-sniffing\/&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Network capturing is a fundamental process in cybersecurity and network diagnostics, involving the interception and analysis of data packets as they move across a network. Tools like Wireshark and TShark are at the forefront of this practice, empowering network administrators, security professionals, and developers to monitor traffic, troubleshoot issues, and understand how systems communicate.&nbsp; In [&hellip;]<\/p>\n","protected":false},"author":118,"featured_media":3633,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"footnotes":""},"categories":[137,206],"tags":[],"class_list":["post-3618","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-computing","category-devops"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Wireshark &amp; TShark: Network Capture and Unencrypted Risks<\/title>\n<meta name=\"description\" content=\"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Wireshark &amp; TShark: Network Capture and Unencrypted Risks\" \/>\n<meta property=\"og:description\" content=\"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/\" \/>\n<meta property=\"og:site_name\" content=\"Nuventure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/nuventureco\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-27T12:15:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-27T12:16:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1480\" \/>\n\t<meta property=\"og:image:height\" content=\"1063\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Jafar A I\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@nuventureco\" \/>\n<meta name=\"twitter:site\" content=\"@nuventureco\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jafar A I\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/\"},\"author\":{\"name\":\"Jafar A I\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#\\\/schema\\\/person\\\/045a981dbe1c1590a2cf13874ab1ab40\"},\"headline\":\"Network Capturing\u00a0 and the Risks of Unencrypted Protocols\u00a0\",\"datePublished\":\"2026-10-27T12:15:19+00:00\",\"dateModified\":\"2026-10-27T12:16:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/\"},\"wordCount\":1013,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Packets-Never-Lie-Cybersecurity-Poster.png\",\"articleSection\":[\"Cloud computing\",\"DevOps\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/\",\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/\",\"name\":\"Wireshark & TShark: Network Capture and Unencrypted Risks\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Packets-Never-Lie-Cybersecurity-Poster.png\",\"datePublished\":\"2026-10-27T12:15:19+00:00\",\"dateModified\":\"2026-10-27T12:16:26+00:00\",\"description\":\"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Packets-Never-Lie-Cybersecurity-Poster.png\",\"contentUrl\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/Packets-Never-Lie-Cybersecurity-Poster.png\",\"width\":1480,\"height\":1063,\"caption\":\"Wireshark and TShark network capture\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/2026\\\/10\\\/27\\\/wireshark-tshark-network-capture\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Network Capturing\u00a0 and the Risks of Unencrypted Protocols\u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/\",\"name\":\"Nuventure Blog\",\"description\":\"Knowledge.transmit!\",\"publisher\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#organization\",\"name\":\"Nuventure Connect Private Limited\",\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo-main-with-cartion-1.webp\",\"contentUrl\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo-main-with-cartion-1.webp\",\"width\":200,\"height\":89,\"caption\":\"Nuventure Connect Private Limited\"},\"image\":{\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/nuventureco\\\/\",\"https:\\\/\\\/x.com\\\/nuventureco\",\"https:\\\/\\\/www.instagram.com\\\/nuventure\\\/\",\"https:\\\/\\\/in.linkedin.com\\\/company\\\/nuventure\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/#\\\/schema\\\/person\\\/045a981dbe1c1590a2cf13874ab1ab40\",\"name\":\"Jafar A I\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g\",\"caption\":\"Jafar A I\"},\"url\":\"https:\\\/\\\/nuventure.com\\\/blog\\\/author\\\/jafar-a-i\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Wireshark & TShark: Network Capture and Unencrypted Risks","description":"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/","og_locale":"en_US","og_type":"article","og_title":"Wireshark & TShark: Network Capture and Unencrypted Risks","og_description":"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.","og_url":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/","og_site_name":"Nuventure Blog","article_publisher":"https:\/\/www.facebook.com\/nuventureco\/","article_published_time":"2026-10-27T12:15:19+00:00","article_modified_time":"2026-10-27T12:16:26+00:00","og_image":[{"width":1480,"height":1063,"url":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png","type":"image\/png"}],"author":"Jafar A I","twitter_card":"summary_large_image","twitter_creator":"@nuventureco","twitter_site":"@nuventureco","twitter_misc":{"Written by":"Jafar A I","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#article","isPartOf":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/"},"author":{"name":"Jafar A I","@id":"https:\/\/nuventure.com\/blog\/#\/schema\/person\/045a981dbe1c1590a2cf13874ab1ab40"},"headline":"Network Capturing\u00a0 and the Risks of Unencrypted Protocols\u00a0","datePublished":"2026-10-27T12:15:19+00:00","dateModified":"2026-10-27T12:16:26+00:00","mainEntityOfPage":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/"},"wordCount":1013,"commentCount":0,"publisher":{"@id":"https:\/\/nuventure.com\/blog\/#organization"},"image":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#primaryimage"},"thumbnailUrl":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png","articleSection":["Cloud computing","DevOps"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/","url":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/","name":"Wireshark & TShark: Network Capture and Unencrypted Risks","isPartOf":{"@id":"https:\/\/nuventure.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#primaryimage"},"image":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#primaryimage"},"thumbnailUrl":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png","datePublished":"2026-10-27T12:15:19+00:00","dateModified":"2026-10-27T12:16:26+00:00","description":"Learn to capture and analyze network traffic with Wireshark and TShark, detect SYN flood attacks and see why unencrypted protocols expose passwords.","breadcrumb":{"@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#primaryimage","url":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png","contentUrl":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2026\/10\/Packets-Never-Lie-Cybersecurity-Poster.png","width":1480,"height":1063,"caption":"Wireshark and TShark network capture"},{"@type":"BreadcrumbList","@id":"https:\/\/nuventure.com\/blog\/2026\/10\/27\/wireshark-tshark-network-capture\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nuventure.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Network Capturing\u00a0 and the Risks of Unencrypted Protocols\u00a0"}]},{"@type":"WebSite","@id":"https:\/\/nuventure.com\/blog\/#website","url":"https:\/\/nuventure.com\/blog\/","name":"Nuventure Blog","description":"Knowledge.transmit!","publisher":{"@id":"https:\/\/nuventure.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nuventure.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/nuventure.com\/blog\/#organization","name":"Nuventure Connect Private Limited","url":"https:\/\/nuventure.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nuventure.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2023\/03\/logo-main-with-cartion-1.webp","contentUrl":"https:\/\/nuventure.com\/blog\/wp-content\/uploads\/2023\/03\/logo-main-with-cartion-1.webp","width":200,"height":89,"caption":"Nuventure Connect Private Limited"},"image":{"@id":"https:\/\/nuventure.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/nuventureco\/","https:\/\/x.com\/nuventureco","https:\/\/www.instagram.com\/nuventure\/","https:\/\/in.linkedin.com\/company\/nuventure"]},{"@type":"Person","@id":"https:\/\/nuventure.com\/blog\/#\/schema\/person\/045a981dbe1c1590a2cf13874ab1ab40","name":"Jafar A I","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88a11dbc7f883eb64d4766378631349335ffdb0e8b0a2be521454217bb15b8d9?s=96&r=g","caption":"Jafar A I"},"url":"https:\/\/nuventure.com\/blog\/author\/jafar-a-i\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/posts\/3618","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/users\/118"}],"replies":[{"embeddable":true,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/comments?post=3618"}],"version-history":[{"count":3,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/posts\/3618\/revisions"}],"predecessor-version":[{"id":3632,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/posts\/3618\/revisions\/3632"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/media\/3633"}],"wp:attachment":[{"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/media?parent=3618"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/categories?post=3618"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nuventure.com\/blog\/wp-json\/wp\/v2\/tags?post=3618"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}