In this second part of the multi-part article, we will go through the functionality of Tshark for doing basic network forensics.

Tshark is a terminal-based tool that is used to analyze network data on your computer. Let's go over the basics of its different commands and filters in this blog post.