QA:Testcase Wireshark

Description

This test case tests the ability of Wireshark to capture and analyze network traffic.

Setup

1. Ensure the wireshark, wireshark-gnome packages are installed.

How to test

1. Add the current user <username> to wireshark group: su -c 'usermod -a -G wireshark <username>'
2. Start capturing network traffic on eth0: wireshark -i eth0 -k
3. Do some network activities, like go to some websites, ssh/ping a remote host.
4. Stop capturing traffic.
5. Save file as: /tmp/test.pcap
6. Close Wireshark
7. Open the saved file with Wireshark: wireshark /tmp/test.pcap
8. Try to use the Filter eg: filter by HTTP, DNS, SSH etc...
9. Try to use Follow TCP stream functionality.
10. Close Wireshark

Expected Results

1. You should see Wireshark capturing packets.
2. Wireshark should be able to save/open the file.
3. Filter and Follow TCP stream should work.
4. Wireshark should works as expected without crashes.