Capturing packets is easy, but making sense of them isn’t. This course will teach you the fundamentals of packet analysis. You’ll learn all about common protocols, how to troubleshoot network issues, and how to investigate security incidents at the packet level. It’s easy to fire up Wireshark and capture some packets…but making sense of them is another story. There’s nothing more frustrating than knowing the answers you need lie in a mountain of data that you don’t know how to sift through. That’s why I wrote the first Practical Packet Analysis book a decade ago. That book is now in its third edition, has been translated to several languages, and has sold over 25,000 copies. Now, I’m excited to create an online course based on the book. The Practical Packet Analysis online course is the best way to get hands on visual experience capturing, dissecting, and making sense of packets.
Syllabus
- How networking works at the packet level.
- How to interpret packet data at a fundamental level in hexadecimal or binary.
- Basic and advanced analysis features of Wireshark.
- How to analyze packets on the command line with tshark and tcpdump.
- Reducing capture files with Berkeley packet filters and Wireshark display filters.
- Techniques for capturing packets to make sure you’re collecting the right data.
- How to interpret common network and transport layer protocols like IPv4, IPv6, ICMP, TCP, and UDP.
- How to interpret common application layer protocols like HTTP, DNS, SMTP, and more.
- Normal and abnormal stimulus and response patterns for common protocols.
- Troubleshooting connectivity issues at the packet level.
- Techniques for carving files from packet streams.
- Understanding network latency and how to locate the source.
- How common network attacks are seen by an intrusion detection systems.
- Techniques for investigating security alerts using packet data.
- How malware communicates on the network.
