

Looking at attempts of attacks or malicious activities.Troubleshooting dropped packets and latency problems.Live capture of traffic/offline analysis.Inspection of hundreds of different protocols.Capturing and finding traffic passing through your network.Some of the tasks one can perform with Wireshark are Wireshark is available for various platforms including Windows, Linux, MacOS, FreeBSD, and some others. One of the features of Wireshark that you will love to learn is the display filter which lets you inspect only that traffic you are really interested in. This should now be able to be emailed to Symantec Technical Support in regards to an open support case, as requested by the case's assigned engineer.Wireshark is an open-source network protocol analyzer tool indispensable for system administration and security.It drills down and displays data travelling on the network.Wireshark allows you to either capture live network packets or to save it for offline analysis. If the packet trace is to be sent for analysis to Symantec Technical Support, click on the File menu > Save.Immediately after reproducing the issue, back in Wireshark, click on the Stop Capture Icon.Reproduce the issue you are trying to debug.Uncheck "Capture packets in promiscuous mode" and "Enable MAC name resolution".Click "Options" button for the interface you wish to do the capture on.In Wireshark, click on the Capture Icon.Note: If the operating system includes User Access Control (UAC), right click on Wireshark's shortcut or executable file and choose "Run as administrator". Install and run Wireshark on the Symantec Endpoint Encryption server or the client computer to be used debugging issue. During its installation, ensure that WinPcap is also installed.

Please contact your network administrator for assistance as necessary. Symantec Technical Support is unable to therefore assist the customer in configuring Wireshark or understanding its packet trace. These instructions are provided as a courtesy for Symantec customers wishing to use this tool in conjunction with troubleshooting issues with Symantec products. Note: This article describes how to capture a network packet trace using the free third party software "Wireshark" from Riverbed Technology on the web site.
