Wireshark for IT Professionals - Stormwind Studios

Overview

This course details how to get the most out of Wireshark, and assumes very little knowledge outside of basic networking such as the OSI model and IPv4 communication. Individuals who haven’t yet come to terms with how to thrive in Wireshark will have the opportunity to get comfortable with the main facets of this tool in the course. Additionally, students are able to follow along in Wireshark with the instructor by using the StormWind Net Range, providing significant hands-on opportunity.

This course satisfies the Wireshark needs for most IT professionals. However, those seeking to do complex TCP/IP analysis or security analysis will find additional classes in this series that use this course as a prerequisite.

COURSE INSTRUCTOR

Dan Young, AI and ChatGPT, Cisco

COURSE DIFFICULTY

Beginner

COURSE DURATION

1h

Skills Learned

After completing this online training course, students will be able to:

Capture Traffic
Navigate a packet capture
Filter traffic
Use Wireshark in production

Network Engineer
IT Professionals looking to learn more about Wireshark
Security Engineer

We suggest students have an understanding of various protocols, including TCP, UDP, DHCP and ICMP.

01. Getting Started in Wireshark

Installing Wireshark
Capturing Traffic on an Interface
Looking at Packets in a Capture
Examining Fields in a Captured Packet
Inspecting Frame Headers
Inspecting Packet Headers
Inspecting TCP Headers
Inspecting UDP Headers
Inspecting DNS Headers

02. Using Filters in Wireshark

Typing Simple Display Filters
Using Boolean Logic in Display Filters
Using Drag and Drop Display Filters
Building Complex Drag and Drop Display Filters
Preparing a Capture Filter
Capture Filter Options

03. Working in a Production Environment with Wireshark

Getting Traffic to Wireshark
Configuring SPAN Sessions
Configuring ERSPAN Traffic for Wireshark
Following TCP or UDP Flows
Saving Packet Captures (PCAPs)
Opening PCAP Files
Marking and Colorizing Packets in a Capture
Controlling the Wireshark Display
Conversation Statistics
Displaying Protocol Hierarchy
Displaying IO Graphs

SKILLS LEARNED

Skills Learned

After completing this online training course, students will be able to:

Capture Traffic
Navigate a packet capture
Filter traffic
Use Wireshark in production

WHO SHOULD ATTEND

Network Engineer
IT Professionals looking to learn more about Wireshark
Security Engineer

PREREQUISITES

We suggest students have an understanding of various protocols, including TCP, UDP, DHCP and ICMP.

COURSE OUTLINE

01. Getting Started in Wireshark

Installing Wireshark
Capturing Traffic on an Interface
Looking at Packets in a Capture
Examining Fields in a Captured Packet
Inspecting Frame Headers
Inspecting Packet Headers
Inspecting TCP Headers
Inspecting UDP Headers
Inspecting DNS Headers

02. Using Filters in Wireshark

Typing Simple Display Filters
Using Boolean Logic in Display Filters
Using Drag and Drop Display Filters
Building Complex Drag and Drop Display Filters
Preparing a Capture Filter
Capture Filter Options

03. Working in a Production Environment with Wireshark

Getting Traffic to Wireshark
Configuring SPAN Sessions
Configuring ERSPAN Traffic for Wireshark
Following TCP or UDP Flows
Saving Packet Captures (PCAPs)
Opening PCAP Files
Marking and Colorizing Packets in a Capture
Controlling the Wireshark Display
Conversation Statistics
Displaying Protocol Hierarchy
Displaying IO Graphs

Say Hi to Mike