Course Highlights
  • Capture and interpret network traffic with Wireshark
  • Understand core networking protocols - DHCP, DNS, TCP/IP
  • Troubleshoot the top five network problems with Wireshark
  • Analyze a cybersecurity attack with Wireshark
Curriculum

5 Topics
Section Intro - What will we learn?
Installing Wireshark and the Command Line Tools
Lab 1 - Hands-On with Wireshark
Lab 1 - Walkthrough - Hands-On with Wireshark
Section Review

2 Topics
Answering your questions
Udemy Tips and Tricks

7 Topics
What are Wireshark Profiles and Why Should We Use Them?
Configuring Profiles Adding Custom Columns
Coloring Traffic
Adjusting the Screen Layout
Lab 2 - Configuring the Wireshark Interface
Lab 2 - Walkthrough - Configuring the Wireshark Interface
Section Review

12 Topics
Introduction to Wireshark Filters
Capture Filters vs Display Filters
Filtering for IP Addresses Source or Destination
Filtering for Protocols and Port Numbers
Filtering for Conversations
Operators in Display Filters
Demo: Using Operators when Filtering Traffic
Special Operators - Contains Matches and In
Demo: How to Use Special Operators When Filtering
Lab 3 - Creating Display Filters in Wireshark
Lab 3 - Walkthrough - Creating Display Filters
Section Review

10 Topics
Think BEFORE You Capture!
How To Capture In a Switched Environment - Local Capture vs SPAN vs TAP
Capturing at Multiple Locations
Should We Use a Capture Filter?
Capturing Traffic with the Wireshark User Interface
How to Capture Intermittent Problems - Long Term Capture Configuration
How to Capture on the Command Line with Dumpcap
Configuring a Ring-Buffer on the CLI
How and Where to Capture Packets
Section Review

8 Topics
Packets and the OSI Model
Ethernet - The Frame Header
Unicasts vs Broadcasts vs Multicasts
The Internet Protocol - Learning the Header Values
Following a Packet Through the Network - Re-Encapsulation
Lab 4 - Analyzing a Packet From Multiple Capture Points
Lab 4 - Walkthrough - Analyzing a Packet
Section Review

12 Topics
Section Overview
Digging Deeper into the IP ID
How to Use the TTL Field
How IP Fragmentation Works
The IP Flags
Whoa! Investigating Suspect Scan Activity
A Look at IPv6
Configuring Wireshark to Find GeoIP Locations
Analyzing a DDoS Attack with GeoIP
Lab 5 - Is this scan as bad as it looks?
Lab 5 - Walkthrough - Is this scan as bad as it looks?
Section Review

6 Topics
UDP Intro
The UDP Header Explained
How DHCP Works
Analyzing DNS
Troubleshooting VoIP and Video Streams
UDP Review

10 Topics
Section Intro
Practical TCP - The Handshake
Hands-On with TCP Flags
Analyzing TCP Options
How Sequence and Acknowledgement Numbers Work
Digging into Retransmissions
Let's Shut it Down - FINs vs Resets
Lab 6 - Is it the Client Network or Server? Can You Isolate the Problem?
Lab 6- Walkthrough - Is it the Client Network or Server?
TCP Analysis Review

7 Topics
Putting it All Together - Section Intro
1. Slow Application Response Time
2. High Network Latency
3. Network Packet Loss
4. Slow File Transfers - TCP Window Problems
5. Network/Application Disconnects - TCP Resets
What to do next with Wireshark - Where to go from here.

1 Topic
Bonus Lecture

  Write a Review

Getting Started with Wireshark: The Ultimate Hands-On Course

Go to Paid Course