

We will use these pcaps of network traffic to practice extracting objects using Wireshark. The instructions assume you understand network traffic fundamentals. This tutorial offers tips on how to export different types of objects from a pcap. If you are a Kali or regular Linux user but your primary box is a Windows machine, WSL2 can surprise you.When reviewing packet captures (pcaps) of suspicious activity, security professionals may need to export objects from the pcaps for a closer examination. This second functionality can be seen in Figure 4 where I have opened a port with netcat in Kali (1) and connected from Windows machine with powercat pointing directly to localhost (2).įigure 4: Port in Kali are available to Windows as localhost


As an example here is a full screen session running Wireshark The beauty of xrdp is that you are not enabled to resolution restriction you have usually on your Linux Hyper-V virtualized environment, so you can run at full screen with absolutely no problem.
