Wireshark is a free network protocol analyser. This hands-on course provides a comprehensive tour of using Wireshark to troubleshoot networks. The course concentrates on the information needed in order to pass the WCNA exam. Students will gain the most from this course only if they already have a sound knowledge of the TCP/IP protocols.
Network analysis, troubleshooting, network traffic
Hands on Download/install Wireshark.
Capturing packets, libpcap, winpcap, airpcap.
Dissectors and plugins. The menus. Right click.
Hands on Using Wireshark.
Wireshark and switches and routers. Remote
Hands on Capturing packets.
Applying, identifiers, qualifiers, protocols,
addresses, byte values. File sets, ring buffers.
Hands on Capture filters.
Configuration folders. Global and personal
configurations. Capture preferences, name
resolution, protocol settings. Colouring traffic.
Hands on Customising Wireshark.
Packet time, timestamps, packet arrival times,
delays, traffic rates, packets sizes, overall bytes.
Hands on Measuring high latency.
Protocols and applications, conversations, packet
lengths, destinations, protocol usages, strams,
Hands on Wireshark statistics.
Applying, clearing, expressions, right click,
conversations, endpoints, protocols, combining
filters, specific bytes, regex filters.
Hands on Display traffic.
Traffic reassembly, UDP and TCP conversations,
Hands on Recreating streams.
Filtered, marked and ranges.
Hands on Export.
The expert system. DNS, ARP, IPv4, IPv6, ICMP,
Hands on Analysing traffic.
Basic graphs, Advanced IO graphs. Round Trip
Time, throughput rates.
Hands on Graphs.
DHCP, HTTP, FTP, SMTP.
Hands on Analysing application traffic.
Signal strength and interference, monitor mode
and promiscuous mode. Data, management and
Hands on WLAN traffic.
Call flows, Jitter, packet loss. RTP, SIP.
Hands on Playing back calls.
Baselining. High latency, arrival times, delta
Hands on Identifying poor performance.
Host vs network forensics, unusual traffic
patterns, detecting scans and sweeps, suspect
Hands on Signatures.
Tshark, capinfos, editcap, mergecap, text2pcap,
Hands on Command tools.
"Lots to learn and taught well."
"Great course, feel more confident now."
This structured training course seeks to build upon workbook learning through the use of group exercises, dynamic discussion and individual tasks in order to deliver an engaging and interactive module that will ensure all candidates are able to transfer their new skills into the workplace.