Wireshark Traffic Analysis Labs

• 💻 Installing Wireshark

• 💻 TCP/IP Analysis Checklist

• 💻 Top Causes of Performance Problems

• 💻 Capturing Traffic

• 💻 Opening Trace Files

• 💻 Processing Packets

• 💻 Master the Intelligent Scrollbar

• 💻 Your First Task When You Leave Class

Learn Capture Methods and Use Capture Filters

• 💬 Analyze Switched Networks

• 💻 Walk-Through a Sample SPAN Configuration

• 💻 Analyze Full-Duplex Links with a Network TAP

• 💻 USB Capture

• 💬 Initial Analyzing Placement

• 💻 Remote Capture Techniques

• 💻 Available Capture Interfaces

• 💻 Save Directly to Disk

• 💻 Examine Key Capture Filters

Customize for Efficiency: Configure Your Global Preferences

• 💻 First Step: Create a Troubleshooting Profile

• 💻 Customize the User Interface

• 💻 Set Your Global Capture Preferences

• 💻 Define Name Resolution Preferences

• 💻 Configure Individual Protocol Preferences

Navigate Quickly and Focus Faster with Coloring Techniques

• 💻 Move Around Quickly: Navigation Techniques

• 💬 Build Permanent Coloring Rules

Spot Network and Application Issues with Time Values and Summaries

• 💻 Examine the Delta Time (End-of-Packet to End-of-Packet)

• 💻 Compare Timestamp Values

• 💻 Compare Timestamps of Filtered Traffic

• 💻 Compare TCP Conversation Timestamp Values

Create and Interpret Basic Trace File Statistics

• 💻 Examine Trace File Summary Information

• 💻 View Active Protocols

• 💻 Graph Throughput to Spot Performance Problems

• 💻 Quickly Locate the Most Active Conversations and Endpoints

• 💬 Numerous Other Statistics are Available

• 💬 Quick Overview of VoIP Traffic Analysis

• 💻 SIP and RTP Analysis Overview

• 💻 SIP Call Setup

• 💻 Session Bandwidth and RTP Port Definition

Focus on Traffic Using Display Filters

• 💻 Filter on Conversations/Endpoints

• 💻 Build Filters Based on Packets

• 💻 Display Filter Syntax

• 💻 Use Comparison Operators and Advanced Filters

• 💻 Filter on Text Strings

• 💬 Watch for Common Display Filter Mistakes

• 💻 Share Your Display Filters

TCP/IP Communications and Resolutions Overview

• 💬 Ethernet Packet and Frame

• 💻 TCP/IP Functionality

• 💬 When Everything Goes Right

• 💬 The Multi-Step Resolution Process

• 💻 Resolution Helped Build the Packet

• 💻 Where Faults Can Occur

• 💬 Typical Causes of Slow Performance

Analyze DNS Traffic

• 💻 DNS Packet Structure

• 💻 DNS Queries

• 💻 Filter on DNS Traffic

• 💻 Analyze Normal/Problem DNS Traffic

Analyze ARP Traffic

• 💬 ARP Overview

• ARP Packet Structure

Analyze IPv4 Traffic

• 💻 IPv4 Overview

• 💻 IPv4 Packet Structure

• 💻 Analyze Broadcast/Multicast Traffic

• 💻 Filter on IPv4 Traffic

• 💻 IP Protocol Preferences

• 💻 Analyze Normal/Problem IP Traffic

Analyze ICMP Traffic

• 💻 ICMP Overview

• 💻 Watch for Service Refusals

Analyze UDP Traffic

• 💬 UDP Overview

• 💻 Filter on UDP Traffic

• 💻 Follow UDP Streams to Reassemble Data

Analyze TCP Protocol

• 💬 TCP Overview

• 💻 The TCP Connection Process

• 💻 TCP Handshake Problem

• 💻 Watch Service Refusals

• 💻 The TCP Sequencing/Acknowledgment Process

• 💻 Packet Loss Detection in Wireshark

• 💻 Fast Recovery/Fast Retransmission Detection in Wireshark

• 💻 Out-of-Order Segment Detection in Wireshark

• 💻 Selective Acknowledgement (SACK)

• 💻 Window Scaling

• 💻 Window Size Issues: Scaling and Receive Buffer Limitations

• 💻 TCP Sliding Window Overview

• 💻 Troubleshoot TCP Quickly with Expert Info

• 💻 Properly Set TCP Preferences

Graph Traffic Characteristics

• 💻 Advanced I/O Graphing

• 💻 Graph Round Trip Times

• 💻 Graph TCP Throughput

• 💻 Find Problems Using TCP Time Sequence Graphs

Analyze HTTP Traffic

• 💻 Display Macros

• 💻 HTTP Overview

• 💻 HTTP Packet Structure

• 💻 Reassembling HTTP Objects

• 💻 HTTP Statistics

• 💻 HTTP Response Time

• 💬 Decoding SSL Traffic with Wireshark

• 💻 Overview of HTTP/2

• 💬 HTTP/2 Analysis Fundamentals

• 💻 HTTP/2 Frame Format

• 💻 Analyze Normal/Problem HTTP Traffic

Analyze TLS-Encrypted Traffic (HTTPS)

• 💻 Analyze HTTPS Traffic

Quick Start

• 💬 Wireshark Cheatsheet