Duration
Mastering Network Analysis with Wireshark
4 days
Overview
This intensive 4-day course provides participants with a comprehensive understanding of network analysis using Wireshark. From fundamental concepts to advanced analysis techniques, participants will gain practical skills and insights into troubleshooting network issues, optimizing network performance, and ensuring network security.
Learning Objectives
- Master the use of Wireshark for capturing and analyzing network traffic.
- Customize Wireshark preferences for efficient analysis.
- Navigate quickly through captured data and focus on relevant packets.
- Spot network and application issues using time values and summaries.
- Interpret trace file statistics and graph traffic characteristics for in-depth analysis.
- Analyze common network protocols and troubleshoot TCP/IP communications.
- Apply advanced analysis techniques for comprehensive network troubleshooting.
- Review key troubleshooting steps and best practices for efficient network analysis.
Day 1: Introduction to Network Analysis and Wireshark
- TCP/IP Analysis Checklist
- Identifying Top Causes of Performance Problems
- Installing and Updating Wireshark
- Capturing Traffic: Techniques and Best Practices
- Opening and Processing Trace Files
- Overview of the Qt Interface
- Utilizing Linked Panes for Efficient Analysis
- Exploring the Icon Toolbar and Intelligent Scrollbar
- Understanding the Changing Status Bar
- Utilizing Right-Click Functionality
- General Analyst Resources
- Assigning First Task for Further Practice
Day 2: Capture Methods and Capture Filters
- Analyzing Switched Networks
- Walk-Through of Sample SPAN Configuration
- Analyzing Full-Duplex Links with Network TAPs
- Understanding Wireless Network Analysis
- USB Capture Techniques
- Initial Analysis Placement Strategies
- Exploring Remote Capture Techniques
- Available Capture Interfaces Overview
- Saving Captured Data Directly to Disk
- Configuration of Capture File Settings
- Limiting Capture with Capture Filters
- Examine Key Capture Filters and Their Applications
Day 3: Customization for Efficiency and Navigation
- Creating a Troubleshooting Profile
- Customizing the User Interface for Enhanced Workflow
- Adding Custom Columns for Packet List Pane
- Configuring Global Capture Preferences
- Defining Name Resolution Preferences
- Customizing Individual Protocol Preferences
- Navigating Quickly with Various Techniques
- Finding Packets Based on Characteristics
- Building Permanent Coloring Rules
- Using the Intelligent Scrollbar and Temporary Coloring
- Marking Packets of Interest for Future Analysis
Day 4: Advanced Analysis and Troubleshooting
- Spotting Network and Application Issues with Time Values and Summaries
- Interpreting Basic Trace File Statistics
- Understanding VoIP Traffic Analysis
- Focusing on Traffic Using Display Filters
- Analyzing TCP/IP Communications and Resolutions
- Analyzing DNS, ARP, IPv4, ICMP, UDP, and TCP Traffic
- Examining Advanced Trace File Statistics
- Graphing Traffic Characteristics for Visual Analysis
- Analyzing HTTP and TLS-Encrypted Traffic
- Reviewing Key Troubleshooting Steps and Best Practices
Prerequisites
- Basic understanding of computer networks and protocols.
- Familiarity with TCP/IP networking concepts.
- Knowledge of using command-line interfaces in Windows and Linux operating systems.
- No prior experience with Wireshark is required, but basic networking knowledge is recommended.
Programme scope, delivery arrangements and suitability are confirmed during enquiry.