
I'm glad you've decided to take my course. I have more than 10 years experience in security related subjects including reverse engineering, code audit, exploit writing and network security. I'm confident you'll be very satisfied with what you'll learn from me.
This is my first Udemy course. I'll be more than happy to hear your feedback and ideas for next courses.
Enjoy
Just a quick overview of what you'll learn about Wireshark during this course.
You should be comfortable with terms like TCP, UDP, HTTP, network interface to fully grasp the knowledge from this course. In this lecture I'll take you through the quick summary of OSI layers model and most important protocols.
Wireshark on Windows requires WinPcap. I'll show you how to get the application ready for next lectures.
You'll have to install X11/XQuartz to run Wireshark on Mac OS X and I'll show you exactly how to do that.
Most Linux distributions have Wireshark in their package repositories. I'll show you how to install and run Wireshark on Debian, Ubuntu and CentOS.
To know what traffic you can capture on a specific host you have to understand basics of network infrastructure around it. I'll show you most often encountered situations and explain where to run Wireshark to capture the traffic you're interested in.
I'll show you the most basic use case for Wireshark - capturing network traffic to and from your own computer. You can use this to analyse and reverse engineer applications running on your computer.
Sniffing traffic on a busy network might get you gigabytes of data in minutes. You'll usually know in front which part of it is interesting for you so the rest is pretty much useless. I'll teach you how to use Wireshark capture filters to collect only those packets that are interesting for you analysis.
Sometimes it's more convenient to use command line version of Wireshark to capture packets. Especially if you're sniffing on remote hosts like a linux server. In this lecture I'll teach you how to use Wireshark command line tools.
Wireshark is the most powerful network analysis tool every coder should know. After you learn it it'll become one of the most important application in your toolbox.
If you are ...
... this is the course for you!
I have more than 15 years of experience in programming and reverse engineering and I know how much harder my life would be without tool like Wireshark. That's why I've made this course. If I had such edu resources available when I was learning I could leapfrog to the next level and save a lot of time spent on trial and error.
The course is 19 lectures, 60 min of video content in total. It's pure knowledge, straight to the point, stripped of all unimportant crap.
Students so far rate it at 5 out of 5 stars. I'm confident you will not regret the one hour time investment in this course.
Here's what other students said about this course so far:
You can read more excellent reviews like that on the bottom of this page.
During this tutorial you'll learn how to use Wireshark sniffer to capture network traffic and then analyse it.
This is beginners course so I'll cover network related terms like TCP and network infrastructure basics.
You will learn how to install and run Wireshark on Windows, Mac OSX and Linux - console only systems.
I'll teach you how to capture network traffic, use capture filters and what is the promiscuous mode. I will also show you how to capture network traffic on remote unix system using command line tool: tshark.
Then, you'll learn captured packets analysis. I will teach you how to use and customize the main Wireshark window, what are dissectors and how are they related to display filters.
You will learn some advanced techniques like extracting files from captured network streams and separating one specific connection from the pcap file.
During the course I will provide you with a lot of external resources where you can learn more about Wireshark and network security in general.
At the very end, as a bonus session, I will show you practical example of capturing a password sent over HTTP connection.