
This video will give you an overview about the course.
In this video, we will learn how to install and customize the Wireshark installation.
• Covers the installation of Wireshark
• Install Wireshark
In this video, we will Customize the Preferences and Profiles in Wireshark.
• Discuss some common preferences used in Wireshark
• Explain profiles
• Create a custom profile with unique preferences
In this video, we will learn the different components of the Wireshark GUI.
• Discuss the different components of the Wireshark GUI
• Explain the uses of the different components
• Identity the different user interface components
In this video, we will learn how to use color to identify different types of network traffic.
• Explain default coloring rules
• Explain how to turn on coloring rules
• Use color to identify a network conversation
Discuss the Operating System and hardware requirements needed to run Wireshark.
• Discuss supported Operating Systems
• Discuss hardware requirements and recommendations
• Explain the Operating System and hardware needed for PyShark
Describes the source of packet captures.
• Explain capture interfaces
• Explain external packet capture
• Define a capture interface
Selecting a source for capturing packets in both Wireshark and PyShark.
• Select a capture interface in Wireshark
• Select a capture interface in PyShark
• Capture packets in both Wireshark and PyShark
Learn to change view settings and save packet captures.
• Modify view settings
• Save packet capture in Wireshark
• Save packet capture in PyShark
Cover how to apply capture filters in both Wireshark and PyShark.
• Apply capture filter in Wireshark
• Modify and save capture filter in Wireshark
• Apply capture filter in PyShark
Explain time view settings in Wireshark and PyShark.
• Modify view settings in Wireshark
• View time display options in PyShark
• Examine time settings in both Wireshark and PyShark
Review how to examine statistics and I/O graphs in Wireshark.
• Examine the different statistical options in Wireshark
• Generate graphs
• Export a report
Learn about using the expert system usage in Wireshark.
• Review expert information
• Review color coding of expert information
• Apply filters in expert information
Discuss display filters and their uses.
• Review existing display filters
• Create new display filter
• Manage display filters
Discuss Display Filter Macros.
• Review existing Display Filter Macros
• Create new Display Filter Macro
• Manage Display Filter Macros
Discuss Display Filter Expressions.
• Review existing Display Filter Expressions
• Create new Display Filter Expression
• Manage Display Filter Expressions
Learn about using Conversation Filters.
• Review conversation filters
• Create a conversation filter
• Manage conversation filters
Learn about exporting packet captures from Wireshark and PyShark.
• Export packet capture from Wireshark
• Export packet capture from PyShark
Learn about protocol streams.
• Follow a protocol stream
• Review examples of protocol streams
Learn about reviewing statistics in Wireshark.
• Review examples of statistics in Wireshark
Learn about reviewing Telephony and Wireless Traffic.
• Review Telephony
• Review Wireless Traffic
Discuss and Analyze UDP traffic.
• Discuss UDP traffic types
• Analyze UDP traffic types
Discuss and Analyze TCP traffic.
• Discuss TCP traffic types
• Analyze TCP traffic types
Discuss and analyze graphical representations of network traffic.
• Discuss Graphs
• Visually analyze traffic
Discuss and analyze DHCP traffic.
• Discuss DHCP traffic
• Analyze DHCP traffic
• Review examples of DHCP traffic
Discuss and analyze HTTP traffic.
• Discuss HTTP traffic
• Analyze HTTP traffic
• Review examples of HTTP traffic
Discuss and analyze FTP traffic.
• Discuss FTP traffic
• Analyze FTP traffic
• Review examples of FTP traffic
Discuss and analyze VoIP traffic.
• Discuss VoIP traffic
• Analyze VoIP traffic
• Review examples of VoIP traffic
Discuss and analyze sample traffic captures.
• Discuss where to get sample traffic captures
• Analyze sample traffic captures
• Review some examples of different types of sample traffic
Understand the command-line usage and learn when it is preferred.
• Learn when to use the command-line
• Review scenarios when command-line usage
Learn about launching Wireshark from the command-line
• Learn the command-line start options for Wireshark
• Learn about TShark, Tcpdump, and Dumpcap
Learn about using TShark.
• Review TShark usage
• Discuss common TShark commands
• Review TShark examples
Learn about using Dumpcap
• Review Dumpcap usage
• Discuss common Dumpcap commands
• Review Dumpcap examples.
Learn about using TShark (with PowerShell)
• Review TShark (with PowerShell) usage
• Discuss common TShark (with PowerShell) commands
• Review TShark (with PowerShell) example
Learn about choosing what traffic to capture.
• Strategy for determining what needs to be captured
• Come up with a plan
• Review an example
Implementing a capture scenario.
• Discuss capture scenario
• Capture the specific type of traffic (DHCP)
Analyzing traffic from a capture scenario.
• Review only the relevant traffic
• Analyze sample DHCP traffic
Review capturing options for capturing just the desired type of traffic.
• Discuss defining a capture filter
• Apply capture filter for only the traffic that is needed
Use PyShark for capturing the required traffic.
• Review the options for capturing traffic
• Review an example
Learn to use Mirror Ports for monitoring remote device traffic.
• How to use port mirroring
• Explain how port mirroring works
• Provide an example
Discuss other devices that can be used for capturing packets.
• Discuss firewalls, routers and switches for traffic capture sources
• Review an example
Discuss using Cisco Switches for port mirroring.
• Review configuration of Port Mirror.
• Review an example
Expand upon features by using either plugins or tools that compliment Wireshark
• Discuss other tools
• Review SolarWinds Response Time Viewer
• Review example
Discuss using PyShark to review packet captures from Wireshark or other packet capture sources.
• Discuss differences between FileCapture and LiveCapture
• Review example
Mastering Wireshark 3 (2nd Edition) will help you gain expertise in securing your network. As you progress through the course, you will discover different and important ways to create, use, capture, and display filters.
Learn to master Wireshark's features, analyze different layers of your network protocol, and search for abnormality in your network traffic. The course focuses on packet analysis for security tasks, command-line utilities, and tools that manage trace files.
You will delve into analyzing applications aimed primarily at web browsing; master commands that can also be set up and configured to run from the command prompt; and learn to use the new feature in Cisco routers and switches to capture packets directly from devices and mirror (SPAN) ports. Lastly, you'll learn to expand upon the capabilities and functions of Wireshark plugins and APIs and build on your Python skills by using PyShark to modify how Wireshark captures and filters packets.
By the end of this course, you'll have learned to customize Wireshark in-depth for network security analysis using commonly used protocols and to configure it effectively for troubleshooting and daily monitoring purposes.
About the Author
Rick Bodnar is an IT professional with an extensive technology background; he has worked with technology for over 24 years. In that time, he has held a variety of IT management positions.
In addition, he has also been an adjunct instructor for higher education institutions such as Kent State University, Penn State University, and the University of Mount Union.
His focus is on networking technology. Technologies that Rick Bodnar is proficient in include TCP/IP networking, IP routing, VPN Tunneling, DNS, to name a few. He has worked with Wireshark for over 15 years.