Discussion 4

Wireless Security and Forensics

In this essay, we are going to discuss a tool used in the manual examination of a phone. From the attached reading, the tool that I will be discussing is the wireshark. Wireshark is observed to be a popular graphical tool. From the internet research, there are various advantages and disadvantages associated to the wireshark tool. The advantage of the tool is that, it helps in capturing all kinds of packet data in the network traffic. Additionally, it is seen that wireshark saves and restores the captured packed data. Moreover, the wireshark tool is important in the examination of a phone device in that it helps to show errors and issues in the levels that are below the HTTP protocol.

On the flip side, there are also some limitations of the tool in examination of a phone device. For instance, the wireshark tool cannot modify or manipulate data on the networks (Musa, Abubakar, Gimba, & Rasheed, 2019). This is because; it only does so for data that is to be recorded. Additionally, wireshark tool does not have a current interface for it to conduct its function.

The wireshark tool set up includes the following processes. First, it is important to select capture, select the interfaces on which packets need to be captured, click on the option button foe the chosen interface, click on the start button to start the capture, and recreate the problem.

The wireshark tool is seen to be an effective tool in gathering evidence from a phone during an examination. This tool is a packet sniffer and also performs analsysis. Wireshark captures network traffic on the local networks (Kim, Lee, & Lim, 2020). Later, wireshark stores the data from the network traffic for offline analysis. Thus, the tool is effective in capturing traffic from Bluetooth, Ethernet, Frame Relay connections, and many more.

References

Kim, H., Lee, H., & Lim, H. (2020). Performance of packet analysis between observer and WireShark. 2020 22nd International Conference on Advanced Communication Technology (ICACT). doi:10.23919/icact48636.2020.9061452

Musa, A., Abubakar, A., Gimba, U. A., & Rasheed, R. A. (2019). An investigation into peer-to-peer network security using Wireshark. 2019 15th International Conference on Electronics, Computer and Computation (ICECCO). doi:10.1109/icecco48375.2019.9043236