Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Complete Guide to Network Analysis with Wireshark 2.6
Rating: 4.2 out of 5(13 ratings)
132 students

Complete Guide to Network Analysis with Wireshark 2.6

Analyze network traffic to identify security problems, find bottlenecks, and maximize resource efficiency
Created byPackt Publishing
Last updated 2/2019
English

What you'll learn

  • Discover the key features of Wireshark enabling you to analyze your packet capture.
  • Navigate through, split, and work with large traffic files
  • Use the TCP/IP Resolution Flowchart to identify possible communication faults
  • Create statistical charts and graphs to pinpoint performance issues
  • Analyzing different layers of the network protocol, and also looking in to its security.
  • Network switching, through IP, and then move on to Networking performance problems.
  • Decrypt encrypted wireless traffic and secure network to keep track of malware.

Course content

3 sections • 87 lectures • 6h 6m total length

  • The Course Overview3:27

    This video provides an entire overview of the course.

  • Introduction to Wireshark2:58

    Almost everyone working as an IT professional wants to go behind the scenes of a network and see what’s actually happening but there are several challenges. Wireshark is the solution which will help us to get there.

    • Understand what is Wireshark and its uses

    • Know if Wireshark is right for you

    • Understand the need of packet capture and contents of this series

  • Installing Wireshark on Windows3:06

    Getting Wireshark installer from accurate source and installing it correctly is very crucial before stepping into the world of Wireshark.

    • Download Wireshark from its official website

    • Install WinPCAP

    • Install Wireshark

  • Preparing Your Computer for Wireshark2:19

    For proper functionality of Wireshark, you must ensure that your computer is actually ready to perform packet capture.

    • Understand the process of packet capture

    • Know computer’s minimum requirements for running Wireshark

    • Know computer’s recommended requirements for smooth functioning of Wireshark

  • Getting Familiar with the Wireshark GUI2:19

    Successful packet capture and analysis will only be possible if we understand how to navigate through the graphical user interface of Wireshark.

    • Understand why the startup window is the key to select right interface

    • Understand various menus available

    • Distribute Wireshark main window with different panes

  • Setting Up Profiles1:50

    When different users use Wireshark on a same computer, it can mess up their personal preferences. So profiles can be created so that each user can save their customized preferences.

    • Understand the importance of profiles

    • Create profile using status bar option

    • Create profiles using edit menu option

  • Working with Preferences2:15

    Personal preferences matters, so we will learn about changing the look and feel of Wireshark graphical user interface.

    • Change the menu toolbar style as icons and text

    • Display VLAN ID column and disable packet length column

    • Change time format to display day and time

  • Your First Network Traffic Capture2:28

    Now that we know how to navigate through Wireshark’s GUI, it’s time to learn our first traffic capture.

    • Study various options to run Wireshark

    • Go through various capture options

    • Select network interface(s) for traffic capture

  • Setting Filters Before Capture2:43

    Avoiding unnecessary data in a capture file is a massive boost for Wireshark user, if the user is focused on a particular traffic. Capture filters will help us to achieve that.

    • Explore pre-capture saving options

    • Specify output format

    • Define capture filter and verifying its effect

  • Finding and Working with Captured Data2:08

    After successful capture, we need to learn about how to work with captured data, review and isolate relevant information.

    • Explore timestamps options

    • Use packet comment

    • Understand packet navigation options

  • Setting Display Filters after Capture2:30

    In order to focus on relevant information in Wireshark, display filters are very crucial for analysis and isolation of captured data.

    • Look at the difference between capture filter and display filter

    • See example of capture filter

    • Execute the example of display filter

  • Using Expressions3:39

    In order to create display filter in Wireshark, we must know expressions because they make up display filters. Wireshark provides a powerful display filter language that allows you to build quite complex filter expressions.

    • Learn how to write the expressions yourself or using various GUI tools

    • Check all the possible filter fields

    • Compare/combine expressions value

  • Working with Flow Graphs1:46

    Visualizing captured network packets in the form of graphs can be really helpful during troubleshooting various scenarios.

    • Plot X-Axis

    • Plot Y-Axis

    • Explore different types of graphs available

  • Setting Time Stamps and Time Zone3:17

    Packet capture and analysis is useless without accurate time, hence time stamps on each and every packet is extremely crucial. Whereas if analysis involved people in different timezones, we need to ensure timezone are accurate as well.

    • Understand the importance of timestamps

    • Explore various values of timestamps

    • Set correct timezone

  • Following TCP Streams2:48

    Looking at a particular conversation is required when performing deep packet analysis. This is the time where options like Follow Stream comes handy, it brings the packets involved in an entire conversation. So you know what happened from beginning till the end.

    • Use TCP stream index number

    • Use conversation filter option

    • Follow TCP Stream option

  • Analyzing and Troubleshooting Basic Real-life Scenarios3:22

    Maximum of our time in Wireshark will be used for troubleshooting. So here we understand the steps involved in troubleshooting with a real life scenario.

    • Review DHCP process

    • Connect interface to network and start packet capture

    • Experience DHCP process live in Wireshark with bootp display filter

  • Saving Capture1:43

    In this video we look at how saving the capture is required in order to revisit the capture file which might be needed for any future analysis.

    • Save file in a permanent or temporary location

    • Explore various file formats for saving

    • Explore gzip compression option

  • Importing/Exporting Capture Files2:32

    Wireshark does support importing hex dump file and also supports exporting to various file formats which might be needed for various reasons such as reports, records, and so on.

    • Import hex dump file

    • Explore various options available for exporting data

    • Export captured data in plain text file

  • Merging Capture Files3:06

    In some real life scenarios, we must merge two capture file to understand the real problem. This is why we have the option to merge capture files in Wireshark.

    • Prepend merge option

    • Merge chronologically option and append merge option

    • Conclude the series and look onto the road ahead

  • Test Your Knowledge

Requirements

  • A basic familiarity with common network and application service terms and technologies is assumed.

Description

Wireshark is the world's foremost & most widely-used network protocol analyzer, which helps you monitor activities on your network at a microscopic level. It is also used for network troubleshooting, analysis, software, and communications protocol development.

With this hands-on practical course, you'll start with basics of wireshark to analyze data and solve problems which primarily focus on enhancing your network analysis and web traffic capture skills to build a strong secure foundation. Then you will be trained on Wireshark and TCP/IP communications analysis to identify the most common causes of performance problems in TCP/IP communications. Moving further, you'll be introduce to a command line-version of Wireshark which is tshark. Next, you will also learn about various types of network cyber attack and essential remedies & troubleshooting your network using Wireshark.

Contents and Overview

This training program includes 3 complete courses, carefully chosen to give you the most comprehensive training possible.

The first course, Analyzing Network Traffic with Wireshark 2.6 will give you real-world knowledge about all Wireshark topics followed by a step-by-step implementation guideline while showing you how to work on it practically . This course begins by installing Wireshark and familiarizing you with the GUI interface, then guides you through some important concepts to set up your own home/office lab, which will enable you to efficiently analyze data and solve problems. Throughout the course, we primarily focus on enhancing your network analysis and web traffic capture skills to build a strong secure foundation. By the end of the course, you will not only be comfortable working with Wireshark but also confident enough to implement in your day-to-day work life.

The second course, Wireshark Recipes will teach you to use Wireshark to identify the most common causes of performance problems in TCP/IP communications. You will develop a thorough understanding of how to use Wireshark efficiently to spot the primary sources of network performance problems, and you will prepare for the latest Wireshark certification exam.

The third course, Mastering Wireshark 2.6 starts setting up a Wireshark lab in the Windows and Linux operating systems. We dive into the overall process of packet capturing and Wireshark filters. Then, we introduce tshark, a command line-version of Wireshark, and we learn about various tshark commands. Later, we are introduced to various types of network cyber attack and essential remedies. We also go through an array of techniques to monitor and secure these attacks using Wireshark. Lastly, we cover network troubleshooting using Wireshark.Towards the end of the course, you'll use Wireshark efficiently to find primary sources of network performance problems and also different ways to secure networks.

About the Authors:

Mohammad Junaid, CCIE #43891, is an IT Networking Consultant with over four years' experience in the industry. He is currently based in the Middle East. He is specialized in networking fields which includes routing switching, security, and data center. He has worked with several large private and public-sector enterprises in planning, designing, and implementing IT solutions.

A computer and cyber security expert, Sunil Gupta consults in information technology with a focus on cyber security. He is an invited speaker for, and a member of, many key organizations. Sunil is a technology visionary and cyber security professional who thrives on solving complex problems. His career highlights include working with various companies, organizations, and products. His primary passion is cyber security, but he understands that, to be successful at securing an organization, you must have a detailed understanding of networks and related fields. He is passionate about customer service and his role as a cyber security expert, and always exceeds his clients' expectations. Sunil performs leading-edge security consulting and works in research and development as a security expert to advance state-of-the-art information systems security.

Who this course is for:

  • This course targets penetration testers, cyber security professionals, network engineers, information security professionals, administrators, ethical hackers, security professionals, network administrators, IT professionals who are interested in getting familiar with Wireshark to analyze network traffic & develop or enhance their network analysis skills.

Report abuse