How to do packet analysis

Network packets are captured in raw binary form, and passed through the wiretap library and capture engine, and then to the core engine, with its dissector plugins and filters. The translated data is then displayed in packet frames through Graphical Toolkit (GTK).