By now, you understand the many different types of networks that can influence how data travels. In addition to the various network types, we saw how we must also contend with the media that transmits the data. So that you can effectively capture traffic, we took a closer look at various capture options that include display options, using multiple files, and name resolution.

We then moved into a discussion on the different types of traffic you will see when tapping into a switched network. We then took a look at conversations and endpoints within the Statistics menu so you could understand the difference between the two. We also looked at the many options within the Conversations window. We summarized the importance of baselining the network and suggested some steps on how to conduct the baseline.

In the next chapter, we will discover the many ways to personalize the Wireshark interface. You will learn ways to adjust the appearance and basic layout. I'll show you ways to add, modify, and personalize the configuration profiles. Then, we will evaluate how to add comments to a single packet or an entire capture. Finally, we'll take a look at creating a complex filter expression and a button for your toolbar to simplify your analysis.