In this lecture, we are going to learn what all these columns mean and how to customize them.
So let's get started.
First column is an O and is short for number.
Number column displays.
The packets number to each packet, as you can see, has a unique number.
By default, Wireshark automatically assigns a number one to the first packet in the list, and then
it increments it by one up to the last packet in the list.
Then we have time.
Time column displays the exact time when a packet was captured.
As you can see, by default, Wireshark only displays time in microseconds.
Right.
So if you want to display time in a more presentable or a readable format like date and time, go to
the we will click on time display format from the first half.
Select time of the day again go to the view time or display format from bottom half.
You can select seconds, milliseconds or microseconds, so whatever you know fits you.
I'm going to select seconds.
As you can see, guys, now we have a proper format for displaying the time, right?
Next column that we have is source.
So this column displays the IP address of sender.
Right.
Who has sent the packet and destination column displays the IP address of a receiver or destination?
Let me take an example of packet number five.
So sender of the packet number five is this IP address 102.68 and the receiver is IP address, which
is under the destination column 209.48.
Right.
Then we have protocol column.
Protocol column displays the protocol type.
As you can see, we have all types of traffic or protocol here, TCP, ICMP, right.
Then we have learned length column displays the length of each packet in bytes.
So length of let's say packet number four is 86 bytes.
Remember, guys, Wireshark does not include the FCC frame check sequencer.
The size of FC s is food bytes.
So whatever number you see in the last column add plus food to it.
So the actual size of packet number food is 86 plus four, which is 90.
Now info column gives you a brief summary of packets content.
What content or payload each packet contains.
Right?
Now let's say you don't want the destination column.
You want to remove it.
All you have to do right click on any column.
Now click on destination.
As you can see, the destination column has been removed to get it back again.
Right click on any column and and you select destination and it is back.
Now let's customize these columns.
We can, you know, add our own columns to this list.
I want to add Mac address of sender and receiver as well.
Okay.
It is actually easy, right.
Click on any column, click on column preferences or you can go to the added preferences and click on
columns right here.
We can modify and add new columns.
Let's add a new column.
Click on plus button at the bottom.
As you can see, a new column has been added.
Now double click on the title.
I'm going to give it to source.
Mac Press Enter now double click on the number.
As you can see, it has brought this dropdown or down arrow, click on it.
Now you can select, you know, whatever field you want from this list.
For now, I want the Mac address of sender.
So here it is.
Hardware source address again.
Let me add another field.
Click on plus double click on title.
Destination Mac Press.
Enter double click on a number of.
Drop down.
This is the hardware or destination address.
I'm going to select it.
And this way, guys.
You can add as many fields as you like.
Now click on okay to apply changes.
Okay.
It is going to take a few seconds to, you know, apply changes.
Columns have been added.
Now let me scroll.
Okay.
I'm going to resize the info column.
Now, as you can see, guys, we have source and destination Mac address fields as well.
Right.
And in order to remove, let me go to the column preferences.
All you have to do, let's say you want to remove destination, then click on the field that you want
to remove.
Then click on minus button again.
I'm going to remove this source Mac Field as well.
Click on minus.
Click on okay.
To apply changes.
As you can see, both the fields have been removed, right?
Now, another way to add columns or fields is very simple.
So let me pull up the packet details section and expand the DHCP header values.
Now let's say you want to add source board.
All you have to do right click on it and then click on apply as column.
As you can see, where is the source board field has been added right?
In the same way you can add any columns that you want.
Right.
It is as easy as that.
Right click and then click on apply as column.
Now we have the your destination port field as well.
So guys, in this way, you can add any field from the protocols in the packet details section.
Right.