
Welcome to the "Follow Me" course on Wireshark - the best packet sniffing and dissection tool known to mankind!
I don't think I use any slides at all.
The idea is you can follow me on you machine, and pause/rewind/replay the video lessons as needed.
In this first video lesson, I will introduce the class, and will then proceed with Wireshark installation on Windows.
Those of you with MAC or Linux systems, can stop the video when I indicate and watch your specific installation examples below.
In this lesson, MAC users will want to install or upgrade following me in the process.
Windows and Linux folks, you can skip this.
In this lesson, I will show Linux users how Wireshark is installed.
Windows and MAC users, you can skip this.
OK - we all come back together in this lesson, whether you are Windows, MAC or Linux.
This lesson will provide an overview of the Wireshark GUI. New and prior users of Wireshark alike should follow me here as there are always gems in the Wireshark interface that you may not be aware of.
This follow me will show you how to become a Wireshark power user, and really turn this tool into a powerful troubleshooting and analysis tool you have always wanted.
Using Delta Times is one of the first 5 steps I always apply when troubleshooting with Wireshark.
Follow me as I show you how to do this.
In this Lesson we will use basic file operations to save a capture and then to load a capture. I have added a capture file called 2capture.pcapng in the resources for you to grab and use in the lesson.
Intermittent problems are pesky problems - you never know when they are going to happen.
Follow me as I show you how to capture indefinitely without ever running out of disk space with Wireshark Ring Buffers to catch those intermittent issues.
You don't want to capture too much, or insignificant information.
Follow me as I show you how to use capture filters with Wireshark.
Narrowing your search in captured packets is a skill you have to develop quickly.
Follow me as I show you how to use Wireshark Display Filters to narrow your focus.
It is one of the questions I get asked all the time: "How can I single out a conversation between two systems on the network?"
It is actually really easy and really fast.
Follow me as I show you how.
To take all this filtering to the next level, follow me as I show you how to do some advanced display filtering using display filter macros.
Can you do packet capture using Wireshark on systems with no GUI?
It's a good question, and the answer is yes, because Wireshark comes with a terminal or command line version called T-Shark.
Follow me as I demonstrate how to use T-Shark.
This course takes a completely hands-on approach to learning Wireshark and packet analysis. There are no traditional slide presentations, lengthy theory lectures, or disconnected demonstrations. Instead, students learn by following along directly with real packet captures, real workflows, and practical exercises that build experience step-by-step. The “follow me” teaching modality places the student directly into the analysis process, allowing them to observe, perform, and repeat the exact techniques used by professional network engineers and packet analysts in real-world environments.
Throughout the course, students will develop a strong foundational understanding of Wireshark packet capture, packet analysis, filtering, traffic interpretation, and troubleshooting methodologies. The course focuses on building practical, usable skills that can immediately be applied in broadband, enterprise, Wi-Fi, VoIP, and general IP network troubleshooting environments. Each lesson functions like an interactive lab exercise where students capture packets, analyze traffic patterns, identify protocols, follow conversations, apply filters, and learn how to isolate problems using evidence-based packet analysis techniques.
By the end of the course, students will have established a solid operational foundation in Wireshark and packet-level troubleshooting. Rather than simply memorizing concepts, students will gain hands-on experience and confidence through continuous guided practice, helping them build real analytical skills that can be used in both learning environments and production networks.