Learning Path: Wireshark -The Advanced Network Analysis Tool

Name: Learning Path: Wireshark -The Advanced Network Analysis Tool
Rating: 4.7 (447 reviews)

Analyze your organization’s traffic with ease using one of the most popular and powerful network analyzer, Wireshark 2.

Created byPackt Publishing

Last updated 6/2017

English

What you'll learn

Learn the ways to capture and import information in Wireshark
Customize Wireshark to maximize visibility to major parts of your traces
Identify the common ways of using Wireshark to troubleshoot/track down the source of your network issues
Analyze common network protocols and common network application protocols
Explore the new Wireshark 2 and its enhanced functionalities
Secure your network with ease using the all new Wireshark 2
Harness the power of live capturing, offline analysis, and deep inspection of multiple protocols

Course content

2 sections • 71 lectures • 9h 39m total length

The Course Overview3:53
This video provides an overview of the entire course.
Protocol Analyzers9:26
In this video, we will become acquainted with protocol analyzers and also we will understand why we need them and where we can use them.
Wireshark – Data Input11:52
Let's explore Wireshark as one of the powerful protocol analyzers and discover with its basic and some analysis-related functions.
Wireshark – Initial Settings12:42
We need to become familiar with Wireshark's installation and basic initial setup.
Wireshark – GUI Interface9:32
From this video, listeners will learn the main GUI window part and menu structure possibility for small interface updates from older Wireshark versions to newer ones.
Protocol Stack – Basics7:29
In this video, we will get basic knowledge of protocol stack.
Protocol Stack – Basics (continued)10:52
We will continue with the basic knowledge of protocol stack.
Protocol Stack in Wireshark10:17
We need to discuss how Wireshark shows a protocol in a protocol stack.
Display Filters13:10
Become familiar with applying filtering (selecting specific packets as per rules).
Display Filters (Continued)13:28
Continue the topic to get familiar with applying filtering (selecting specific packets as per rules).
Display Filters – Final Tuning7:43
In this video, we will add something about convenient use of Display filters.
Capture Filters12:04
The aim of this video is to become familiar with applying capture filtering (selecting specific packets as per rules).
Wireshark – Display Customizing18:24
The aim of this video is to become familiar with some added visualization in Wireshark.
Saving Traces11:55
The aim of this video is to learn ways of saving collecting packets.
Splitting/Merging Files17:54
Become familiar with splitting and merging files.
Name Resolution11:48
We need to become familiar with the name resolution mechanism in Wireshark.
Graphical Analysis9:32
In this video, we will explore graphics in Wireshark.
Related Packets4:21
In this video, we will discuss some Wireshark version 2 useful features, that is, related packets.
Useful Statistics8:37
The aim of this video is to explore statistics in Wireshark.
Useful Statistics (Continued)8:13
This video continues to explore statistics in Wireshark.
If Wireshark Doesn't Decode!6:58
In this video, we will talk about Wireshark possibilities to decode something, which for certain reasons it cannot decode initially.
Troubleshooting Overview5:46
Become familiar with troubleshooting in general.
Issues with a Particular Service12:18
Understand how Wireshark can help in finding and fixing a particular issue.
Low Performance8:47
Understand how Wireshark can help in finding and fixing issues related to network throughput limits / low performance.
Additional Help with Security8:53
Understand how Wireshark can help in finding and fixing issues related to network security.

The Course Overview1:52
This video gives an overview of the entire course.
Installing Wireshark on Windows3:37
The aim of this video is to teach you how to install Wireshark on Windows.
Installing Wireshark on Mac and Linux5:07
The aim of this video is to show how to install Wireshark on Mac and Linux.
What’s New in Wireshark 2?3:29
What are the major changes in Wireshark 2 and how are they helpful to you?
Capturing Traffic7:50
This video teaches you how to perform a basic packet capture on an interface.
Saving and Exporting Packets7:46
Learn the various methods and formats you can use to save and export your captured packets. See how to export a selection of packets.
Annotating and Printing Packets8:35
Learn how to annotate and comment your packet captures. Print packets and selections of packets for offline viewing.
Remote Capture Setup5:16
How to set up pcap on a computer separate from the Wireshark interface for remote capture.
Remote Capture Usage2:52
How to remotely capture traffic across the network.
BPF Syntax4:51
Learn about the Berkeley Packet Filter (BPF) syntax.
Capture Filters3:17
How to filter what traffic is captured using BPF syntax?
Display Filters10:14
Discover how to sift through the masses of packets in a capture, and display just what you need.
Follow Streams6:06
How to find individual conversations within a packet capture? This is accomplished by following TCP or UDP streams.
Advanced Filtering8:43
Learn how to filter traffic on a certain data field and other advanced methods.
Preferences10:45
Understand where and how to change Wireshark preferences.
Profiles5:24
Learn how to switch between profiles and why one would want to do so. Also, learn to create your own profiles.
Colorizing Traffic9:51
Learn how Wireshark applies coloring rules, and how to create your own rules.
Colorizing Traffic (Continued)6:11
Learn how to apply coloring rules to real-life analysis situations such as for HTTP and DNS.
TCP/IP Overview8:31
Learn the basics of TCP/IP, how packets are built and the resolution processes.
Time Values and Summaries5:21
Learn how to use the time column to help troubleshoot network issues.
Trace File Statistics7:49
Display useful statistics to help bring to light inconsistencies in a capture.
Expert System Usage4:25
Learn about the Expert System to easily pick out problems that have been automatically found in a packet capture.
DNS Analysis9:45
How does DNS work, what are some common issues with DNS and how do they look in Wireshark?
ARP Analysis7:14
ARP is required for Layer 2 communications; learn to diagnose ARP issues in a network.
IPv4/6 Analysis7:15
Learn the differences between IPv4 and IPv6, and detect issues such as fragmentation and broadcast storms.
ICMP Analysis8:40
What is ICMP, why is it helpful in troubleshooting a network, and what problems can occur with ICMP?
UDP Analysis5:08
Learn the basics of UDP, a protocol that provides quick, connectionless communications.
TCP Analysis I10:40
Learn the basics of picking apart TCP headers and what to look for.
TCP Analysis II6:22
Dive deep into issues that can be detected with Wireshark in TCP.
Graph I/O Rates and TCP Trends10:32
Use graphs to help visualize your packet capture and easily see data flow issues.
DHCP Analysis9:40
Learn about common issues with DHCP, used to automatically address clients.
HTTP Analysis I10:26
Learn the basics of HTTP and common diagnostics for HTTP troubleshooting.
HTTP Analysis II7:06
Dive deep into additional issues with HTTP and observe them in Wireshark.
FTP Analysis10:11
File transfers can often have problems, learn the basics of analyzing FTP issues such as with Passive Mode.
Email Analysis11:26
The aim of this video is to learn how to analyze POP and SMTP connections and packet structures.
802.11 Analysis11:40
Wireless is continually becoming more important every day; learn how to analyze Wi-Fi connection issues such as signal strength, channel selection, and more.
VoIP Analysis11:42
Converged networks are now the norm. Learn how SIP works for voice traffic, and how a connection is created.
VoIP Playback5:59
Dive deep into SIP and learn how to reconstruct a phone call to listen for quality issues.
Running Wireshark from Command Line7:51
In this video, you will learn how to run Wireshark from the command line and explore its options.
Running Tshark4:12
In this video, you will learn how to run the terminal-version of Wireshark to capture traffic.
Running tcpdump6:48
In this video, you will learn how to run the most common *nix dump tool.
Running Dumpcap4:05
In this video, you will learn how to run dumpcap, an alternative to tcpdump.
Wireshark Plugins5:15
The aim of this videos is to learn about Wireshark plugins and how to develop them.
Determining Where to Capture2:17
The aim of this video is to learn the trouble scenario and where packets must be captured from the correct location to help diagnose a problem.
Capturing Scenario Traffic4:07
The aim of this video is to capture the traffic and look for obvious problems.
Diagnosing Scenario Traffic7:23
The aim of this video is to dive deep into the packets and determine the problems.

Requirements

Basic knowledge of the networking concepts
A computer with an Internet connection

Description

Yes, we do agree network analysis might seem very daunting. But thanks to Wireshark 2, it’s no longer a challenge. The improved GUI, the color coding, the human-readable output are only a few of the many features that make Wireshark a popular choice among its contenders.

This Learning Path will introduce you to the basic features of Wireshark 2 and teach you how to leverage these features in the optimal way to organize network traffic.

Yes, this is not a course, it’s a Learning Path.

Packt’s Video Learning Paths are an amalgamation of multiple video courses that are logically tied together to provide you with a larger learning curve.

This Learning Path will brush through the basic networking concepts, and then introduce you to the user interface of Wireshark. Later it moves on to the different ways to create and use the capture and display filters in Wireshark. Also, you’ll be mastering its features, analyzing different layers of the network protocol, and looking for any anomalies.

By the end of this Learning Path, you will be able to use Wireshark for network security analysis and configure it for troubleshooting purposes.

About the authors:

For this Learning Path, we have combined the best works of extremely esteemed authors: Alex Kuzmenko and Andrew Crouthamel.

Alex has more than 16 years of engineering hands-on experience in Telecom field. He used Wireshark for mobile network integration, testing, and troubleshooting for more than 5 years in his job in Ericsson, North America. He also had 6 years of technical training experience preparing and conducting courses related to mobile packet networks in Europe and Asia.

Andrew is an experienced Senior Network Engineer and IT trainer who resides in Doylestown, PA, and currently works with organizations such as NASA, ESA, JAXA, Boeing, and the US Air Force. His passion for teaching shows in his courses, which are filled with excitement and real world anecdotes.

Who this course is for:

This course is ideal for network administrators and security professionals with basic knowledge about networking who are looking to analyze and secure their networks using a powerful open source tool. You do not need any previous knowledge about Wireshark.
This Learning Path follows a step-by-step approach to help you get acquainted with the new user interface and features of Wireshark 2, and then provides an in-depth knowledge of capturing and filtering traffic.

Learning Path: Wireshark -The Advanced Network Analysis Tool

What you'll learn

Explore related topics

Course content

Network Analysis Using Wireshark 225 lectures • 4hr 16min

Mastering Wireshark 246 lectures • 5hr 24min

Requirements

Description

Who this course is for: