July 22, 2026
Wireshark: The Basics — TryHackMe
Wireshark: The Basics Write-up and Walk-through

By Karthikeyan Nagaraj
2 min read
Task 1 — Introduction
- Which file is used to simulate the screenshots?
Ans: http1.pcapngAns: http1.pcapng- Which file is used to answer the questions?
Ans: Exercise.pcapngAns: Exercise.pcapngTask 2 — Total Overview
- Read the "capture file comments". What is the flag?
Ans: TryHackMe_Wireshark_DemoAns: TryHackMe_Wireshark_Demo- What is the total number of packets?
Ans: 58620Ans: 58620- What is the SHA256 hash value of the capture file?
Hash Value is also Available in Capture File Properties
Ans:f446de335565fb0b0ee5e5a3266703c778b2f3dfad7efeaeccb2da5641a6d6ebAns:f446de335565fb0b0ee5e5a3266703c778b2f3dfad7efeaeccb2da5641a6d6ebTask 3 — Packet Dissection
- View packet number 38. Which markup language is used under the HTTP protocol?
Search For Packet No 38 by Scrolling
Ans: Extensible Markup LanguageAns: Extensible Markup Language- What is the arrival date of the packet? (Answer format: Month/Day/Year)
Ans: 05/13/2004Ans: 05/13/2004- What is the TTL value?
You can Find TTL in Internet Protocol Section
Ans: 47Ans: 47- What is the TCP payload size?
You Can find TCP Payload Size in TCP Section
Ans: 424Ans: 424- What is the e-tag value?
Ans: 9a01a-4696-7e354b00Ans: 9a01a-4696-7e354b00Task 4 — Packet Navigation
- Search the "r4w" string in packet details. What is the name of artist 1?
Search String by Ctrl+F or by Edit>Find Packet
Ans: r4w8173Ans: r4w8173- Go to packet 12 and read the comments. What is the answer?
Then Find MD5 Hash Value From the Image
Ans: 911cd574a42865a956ccde2d04495ebfAns: 911cd574a42865a956ccde2d04495ebf- There is a ".txt" file inside the capture file. Find the file and read it; what is the alien's name?
Search for .txt using Ctrl+f
Ans: PacketmasterAns: PacketmasterTask 5
- Go to packet number 4. Right-click on the "Hypertext Transfer Protocol" and apply it as a filter. Now, look at the filter pane. What is the filter query?
Ans: HttpAns: Http- What is the number of displayed packets?
Ans: 1089Ans: 1089- Go to packet number 33790 and follow the stream. What is the total number of artists?
Ans: 3Ans: 3- What is the name of the second artist?
Ans: Blad3Ans: Blad3Thank You For Reading!!!
Happy Hacking!!!