This section will briefly mention the powerful Wireshark and tshark utilities. Wireshark, which is a graphical application, is the dominant tool for analyzing network traffic of almost any kind. Although Wireshark is very powerful, there may be times when you need something lighter that you can execute remotely without a graphical user interface. In such situations, you can use tshark, which is the command-line version of Wireshark.
Unfortunately, talking more about Wireshark and tshark is beyond the scope of this chapter.