The first three octets of the MAC address are reserved for the manufacturer ( organizationally unique identifier ) and the last three octets are reserved for the network interface controller. The physical MAC address from the screenshot indicates that the receiver and the transmitter must have an Asus motherboard (more precisely: BaseBoard Manufactur ASUSTeK COMPUTER INC.

Wireshark visualizes the types of the application layer protocol with different colors: Green means that an HTTP protocol is present (HTTP port 80). IP, TCP, HTTP and urlencoded-form included. In addition to this information, the protocol also contains the size of the packet ( frame length ) and the size it contains ( capture length ). The receiver recognizes the frame with the frame number. The encapulation type is the type of “packet” that the PC received. (Picture above) Let’s look at level 2 of the OSI model: The Frame tab shows information about the data packet that went over the line. If you look at an Ethernet frame in Wireshark, you will see the following text: The protocols are necessary so that the recipient understands the user data and the communication works uniformly and independently of the platform.

ARP – Address Resolution Protocol for MAC resolution on the router.

RDP – Remote Desktop protocol for the transmission of screens.UDP – Fast packets for video and audio (streaming).ICMP – exchange error messages in the network.Wireshark records every Internet packet (no matter what protocol or size) that arrives at your Ethernet connection. Wireshark is a network sniffer, Sniffing means “monitoring”, “investigating” or “spying”. This tutorial is intended to explain to you bit by bit what you can read out of an Ethernet frame (file packet of the Internet). The Wireshark Network Sniffer is a network analysis tool that gives the network administrator deep insight into network activity. TCP – pays attention to completeness, sequence and correctness.

Wireshark https tutorial