Once you understand encapsulation and frame formation, this will help you to to learn about how Wireshark represents frame formation, as shown in the following screenshot:

Not all frames contain data, but this one does, so it is a good example of a fully encapsulated frame.

When looking at a single frame, you will see, at the top in the Frame 4371 line, the metadata about that single frame. After the frame metadata is the following:

• Frame: The frame header shows Ethernet II, and after that are the source and destination MAC addresses.
• Packet: The IP header represents the network layer that holds the source and destination IP addresses.
• Segment: The TCP header represents the transport layer, which holds the source and destination port addresses.
• Data: The HTTP header represents the application layer. In this case, it is a web request.

This is an example of how Wireshark displays the encapsulation process and how it relates to the OSI model.

Now that you have learned about the encapsulation process and frame formation in Wireshark, let's take a look at the NIC and see the OSI model in action on your own system.