Wireshark Training

  1. Core Protocol Analysis
    1. Layer 3 Network Analysis
      1. IPv4 Protocol Analysis
        1. IPv4 Header Structure
          1. Version Field
            1. Internet Header Length
              1. Type of Service
                1. Total Length
                  1. Identification
                    1. Flags
                      1. Reserved Flag
                        1. Don't Fragment Flag
                          1. More Fragments Flag
                          2. Fragment Offset
                            1. Time to Live
                              1. Protocol Field
                                1. Header Checksum
                                  1. Source Address
                                    1. Destination Address
                                      1. Options Field
                                      2. IPv4 Fragmentation
                                        1. Fragmentation Process
                                          1. Fragment Reassembly
                                            1. Fragmentation Issues
                                            2. IPv4 Addressing
                                              1. Address Classes
                                                1. Subnetting Analysis
                                                  1. Private Address Ranges
                                                2. IPv6 Protocol Analysis
                                                  1. IPv6 Header Structure
                                                    1. Version Field
                                                      1. Traffic Class
                                                        1. Flow Label
                                                          1. Payload Length
                                                            1. Next Header
                                                              1. Hop Limit
                                                                1. Source Address
                                                                  1. Destination Address
                                                                  2. IPv6 Extension Headers
                                                                    1. Hop-by-Hop Options Header
                                                                      1. Routing Header
                                                                        1. Fragment Header
                                                                          1. Destination Options Header
                                                                            1. Authentication Header
                                                                              1. Encapsulating Security Payload Header
                                                                              2. IPv6 Addressing
                                                                                1. Address Types
                                                                                  1. Address Scopes
                                                                                    1. Address Configuration
                                                                                  2. Internet Control Message Protocol
                                                                                    1. ICMPv4 Analysis
                                                                                      1. ICMP Message Types
                                                                                        1. Echo Request and Reply
                                                                                          1. Destination Unreachable
                                                                                            1. Source Quench
                                                                                              1. Redirect
                                                                                                1. Time Exceeded
                                                                                                  1. Parameter Problem
                                                                                                    1. Timestamp Request and Reply
                                                                                                      1. Information Request and Reply
                                                                                                      2. ICMP Error Message Analysis
                                                                                                        1. Ping Analysis
                                                                                                          1. Traceroute Analysis
                                                                                                          2. ICMPv6 Analysis
                                                                                                            1. ICMPv6 Message Types
                                                                                                              1. Neighbor Discovery Protocol
                                                                                                                1. Path MTU Discovery
                                                                                                            2. Layer 4 Transport Analysis
                                                                                                              1. TCP Protocol Analysis
                                                                                                                1. TCP Segment Structure
                                                                                                                  1. Source Port
                                                                                                                    1. Destination Port
                                                                                                                      1. Sequence Number
                                                                                                                        1. Acknowledgment Number
                                                                                                                          1. Data Offset
                                                                                                                            1. Reserved Bits
                                                                                                                              1. Control Flags
                                                                                                                                1. URG Flag
                                                                                                                                  1. ACK Flag
                                                                                                                                    1. PSH Flag
                                                                                                                                      1. RST Flag
                                                                                                                                        1. SYN Flag
                                                                                                                                          1. FIN Flag
                                                                                                                                          2. Window Size
                                                                                                                                            1. Checksum
                                                                                                                                              1. Urgent Pointer
                                                                                                                                                1. Options Field
                                                                                                                                                2. TCP Connection Management
                                                                                                                                                  1. Three-Way Handshake
                                                                                                                                                    1. SYN Packet Analysis
                                                                                                                                                      1. SYN-ACK Packet Analysis
                                                                                                                                                        1. ACK Packet Analysis
                                                                                                                                                        2. Connection Establishment Issues
                                                                                                                                                          1. Connection Termination
                                                                                                                                                            1. Four-Way Handshake
                                                                                                                                                              1. RST-Based Termination
                                                                                                                                                            2. TCP Flow Control
                                                                                                                                                              1. Window Size Management
                                                                                                                                                                1. Window Scaling
                                                                                                                                                                  1. Zero Window Conditions
                                                                                                                                                                  2. TCP Reliability Mechanisms
                                                                                                                                                                    1. Sequence Number Analysis
                                                                                                                                                                      1. Acknowledgment Analysis
                                                                                                                                                                        1. Retransmission Detection
                                                                                                                                                                          1. Duplicate ACK Analysis
                                                                                                                                                                            1. Out-of-Order Segment Detection
                                                                                                                                                                            2. TCP Performance Analysis
                                                                                                                                                                              1. Round-Trip Time Calculation
                                                                                                                                                                                1. Throughput Analysis
                                                                                                                                                                                  1. Congestion Control Analysis
                                                                                                                                                                                2. UDP Protocol Analysis
                                                                                                                                                                                  1. UDP Datagram Structure
                                                                                                                                                                                    1. Source Port
                                                                                                                                                                                      1. Destination Port
                                                                                                                                                                                        1. Length Field
                                                                                                                                                                                          1. Checksum
                                                                                                                                                                                          2. UDP Communication Patterns
                                                                                                                                                                                            1. UDP vs TCP Comparison
                                                                                                                                                                                              1. UDP-Based Protocol Analysis
                                                                                                                                                                                            2. Layer 7 Application Analysis
                                                                                                                                                                                              1. Domain Name System Analysis
                                                                                                                                                                                                1. DNS Message Structure
                                                                                                                                                                                                  1. Header Section
                                                                                                                                                                                                    1. Transaction ID
                                                                                                                                                                                                      1. Flags
                                                                                                                                                                                                        1. Question Count
                                                                                                                                                                                                          1. Answer Count
                                                                                                                                                                                                            1. Authority Count
                                                                                                                                                                                                              1. Additional Count
                                                                                                                                                                                                              2. Question Section
                                                                                                                                                                                                                1. Answer Section
                                                                                                                                                                                                                  1. Authority Section
                                                                                                                                                                                                                    1. Additional Section
                                                                                                                                                                                                                    2. DNS Query Types
                                                                                                                                                                                                                      1. A Records
                                                                                                                                                                                                                        1. AAAA Records
                                                                                                                                                                                                                          1. CNAME Records
                                                                                                                                                                                                                            1. MX Records
                                                                                                                                                                                                                              1. PTR Records
                                                                                                                                                                                                                                1. NS Records
                                                                                                                                                                                                                                  1. SOA Records
                                                                                                                                                                                                                                    1. TXT Records
                                                                                                                                                                                                                                    2. DNS Resolution Process
                                                                                                                                                                                                                                      1. Recursive Queries
                                                                                                                                                                                                                                        1. Iterative Queries
                                                                                                                                                                                                                                          1. Caching Behavior
                                                                                                                                                                                                                                          2. DNS Security Analysis
                                                                                                                                                                                                                                            1. DNS Cache Poisoning
                                                                                                                                                                                                                                              1. DNS Tunneling Detection
                                                                                                                                                                                                                                            2. HTTP Protocol Analysis
                                                                                                                                                                                                                                              1. HTTP Request Analysis
                                                                                                                                                                                                                                                1. Request Line
                                                                                                                                                                                                                                                  1. Method
                                                                                                                                                                                                                                                    1. URI
                                                                                                                                                                                                                                                      1. Version
                                                                                                                                                                                                                                                      2. Request Headers
                                                                                                                                                                                                                                                        1. Host Header
                                                                                                                                                                                                                                                          1. User-Agent Header
                                                                                                                                                                                                                                                            1. Accept Headers
                                                                                                                                                                                                                                                              1. Authorization Header
                                                                                                                                                                                                                                                              2. Request Body
                                                                                                                                                                                                                                                              3. HTTP Response Analysis
                                                                                                                                                                                                                                                                1. Status Line
                                                                                                                                                                                                                                                                  1. Version
                                                                                                                                                                                                                                                                    1. Status Code
                                                                                                                                                                                                                                                                      1. Reason Phrase
                                                                                                                                                                                                                                                                      2. Response Headers
                                                                                                                                                                                                                                                                        1. Content-Type Header
                                                                                                                                                                                                                                                                          1. Content-Length Header
                                                                                                                                                                                                                                                                            1. Cache-Control Header
                                                                                                                                                                                                                                                                            2. Response Body
                                                                                                                                                                                                                                                                            3. HTTP Methods
                                                                                                                                                                                                                                                                              1. GET Method
                                                                                                                                                                                                                                                                                1. POST Method
                                                                                                                                                                                                                                                                                  1. PUT Method
                                                                                                                                                                                                                                                                                    1. DELETE Method
                                                                                                                                                                                                                                                                                      1. HEAD Method
                                                                                                                                                                                                                                                                                        1. OPTIONS Method
                                                                                                                                                                                                                                                                                        2. HTTP Status Codes
                                                                                                                                                                                                                                                                                          1. 1xx Informational
                                                                                                                                                                                                                                                                                            1. 2xx Success
                                                                                                                                                                                                                                                                                              1. 3xx Redirection
                                                                                                                                                                                                                                                                                                1. 4xx Client Error
                                                                                                                                                                                                                                                                                                  1. 5xx Server Error
                                                                                                                                                                                                                                                                                                  2. HTTP Performance Analysis
                                                                                                                                                                                                                                                                                                    1. Request-Response Timing
                                                                                                                                                                                                                                                                                                      1. Keep-Alive Connections
                                                                                                                                                                                                                                                                                                        1. Compression Analysis
                                                                                                                                                                                                                                                                                                      2. HTTPS and TLS Analysis
                                                                                                                                                                                                                                                                                                        1. TLS Handshake Analysis
                                                                                                                                                                                                                                                                                                          1. Certificate Analysis
                                                                                                                                                                                                                                                                                                            1. Encryption Analysis
                                                                                                                                                                                                                                                                                                            2. DHCP Protocol Analysis
                                                                                                                                                                                                                                                                                                              1. DHCP Message Structure
                                                                                                                                                                                                                                                                                                                1. Message Type
                                                                                                                                                                                                                                                                                                                  1. Hardware Type
                                                                                                                                                                                                                                                                                                                    1. Hardware Address Length
                                                                                                                                                                                                                                                                                                                      1. Hops
                                                                                                                                                                                                                                                                                                                        1. Transaction ID
                                                                                                                                                                                                                                                                                                                          1. Seconds
                                                                                                                                                                                                                                                                                                                            1. Flags
                                                                                                                                                                                                                                                                                                                              1. Client IP Address
                                                                                                                                                                                                                                                                                                                                1. Your IP Address
                                                                                                                                                                                                                                                                                                                                  1. Server IP Address
                                                                                                                                                                                                                                                                                                                                    1. Gateway IP Address
                                                                                                                                                                                                                                                                                                                                      1. Client Hardware Address
                                                                                                                                                                                                                                                                                                                                        1. Server Name
                                                                                                                                                                                                                                                                                                                                          1. Boot Filename
                                                                                                                                                                                                                                                                                                                                            1. Options
                                                                                                                                                                                                                                                                                                                                            2. DHCP Process Analysis
                                                                                                                                                                                                                                                                                                                                              1. DHCP Discover
                                                                                                                                                                                                                                                                                                                                                1. DHCP Offer
                                                                                                                                                                                                                                                                                                                                                  1. DHCP Request
                                                                                                                                                                                                                                                                                                                                                    1. DHCP Acknowledge
                                                                                                                                                                                                                                                                                                                                                    2. DHCP Options Analysis
                                                                                                                                                                                                                                                                                                                                                      1. Subnet Mask Option
                                                                                                                                                                                                                                                                                                                                                        1. Router Option
                                                                                                                                                                                                                                                                                                                                                          1. DNS Server Option
                                                                                                                                                                                                                                                                                                                                                            1. Lease Time Option
                                                                                                                                                                                                                                                                                                                                                            2. DHCP Troubleshooting
                                                                                                                                                                                                                                                                                                                                                              1. Lease Renewal Issues
                                                                                                                                                                                                                                                                                                                                                                1. IP Address Conflicts

                                                                                                                                                                                                                                                                                                                                                          Previous

                                                                                                                                                                                                                                                                                                                                                          5. Analyzing Traffic with Display Filters

                                                                                                                                                                                                                                                                                                                                                          Go to top

                                                                                                                                                                                                                                                                                                                                                          Next

                                                                                                                                                                                                                                                                                                                                                          7. Advanced Analysis Techniques