From Fedora Project Wiki

(categorize correctly)
Line 23: Line 23:
[[Category:Security Lab]]
[[Category:Security Lab]]
[[Category:Test Cases]]

Latest revision as of 18:32, 31 May 2011


This test case tests the ability of Wireshark to capture and analyze network traffic.


  1. Ensure the Package-x-generic-16.pngwireshark, Package-x-generic-16.pngwireshark-gnome packages are installed.

How to test

  1. Add the current user <username> to wireshark group: su -c 'usermod -a -G wireshark <username>'
  2. Start capturing network traffic on eth0: wireshark -i eth0 -k
  3. Do some network activities, like go to some websites, ssh/ping a remote host.
  4. Stop capturing traffic.
  5. Save file as: /tmp/test.pcap
  6. Close Wireshark
  7. Open the saved file with Wireshark: wireshark /tmp/test.pcap
  8. Try to use the Filter eg: filter by HTTP, DNS, SSH etc...
  9. Try to use Follow TCP stream functionality.
  10. Close Wireshark

Expected Results

  1. You should see Wireshark capturing packets.
  2. Wireshark should be able to save/open the file.
  3. Filter and Follow TCP stream should work.
  4. Wireshark should works as expected without crashes.