Introduction

• Appreciating traffic analysis
• What you need to know
• Challenges
• Disclaimer

1. Traffic Capture Overview

• Benefits of traffic analysis
• Download and install on a PC or Mac
• Explore the Wireshark interface
• Getting help
• Tap into the data stream

2. Getting Started with Wireshark

• Using display and capture filters
• Discovering shortcuts
• Grasping the OSI model
• Generating a frame
• Challenge: Recognize the Wireshark interface
• Solution: Recognize the Wireshark interface

3. Examining the Internet Suite

• Understanding the TCP-IP suite
• Explaining Transmission Control Protocol
• Recognizing the TCP connection process
• Viewing the TCP handshake and teardown
• Breaking down User Datagram Protocol
• Outlining IPv4
• Dissecting IPv6
• Comprehending ICMP
• Discovering ICMPv6
• Challenge: Evaluating a pcap
• Solution: Evaluating a pcap

4. Deep Packet Analysis of Common Protocols

• Dissecting DNS
• Exploring DHCP
• Following an FTP transaction
• Using HTTP
• Understand ARP
• Challenge: Examining a packet capture
• Solution: Examining a packet capture

5. Working with Packet Captures

• The Wireshark expert system
• Network latency issues
• Subset, save, and export
• Using CloudShark

Conclusion

• What's next?