Wireshark – Basic Training
Targeted recording and systematic analysis of network traffic
.svg)
Machine Learning Engineer
1. Wireshark as a Work Tool
- Packet list, log details, and byte view; navigation, search, and streams.
- Custom profiles, useful columns, date/time display, and filter buttons.
2. Find Relevant Communications
- Create and combine display filters.
- Filter by addresses, logs, and connections.
- Use capture filters and display filters appropriately.
3. Record data systematically and understand the measurements
- Select an interface and measurement point, limit recordings, and use predefined network diagrams.
- Understanding Visibility in Switched and Routed Networks.
- Take into account incomplete recordings and typical recording artifacts.
4. Read Protocol Workflows
- Use Ethernet, IP addresses, and ports for reference.
- Understand selected processes involved in address resolution, name resolution, and TCP communication.
- Learn about normal behavior as a basis for troubleshooting.
5. Prepare and Analyze Data
- Understand composite communication using reassembly and stream views.
- Export selected data and objects.
- Overview of additional command-line tools.
6. Statistics, Timing Behavior, and Initial Troubleshooting
- Systematically check file properties, protocol hierarchy, endpoints, and connections.
- Use I/O graphs and selected TCP diagrams.
- Classify network latency, application response time, and throughput using simple examples.
- Verify expert reports based on the package's tracking history.
- You set up Wireshark for your daily analysis work and use it with confidence.
- You prepare recordings and accurately assess their significance.
- You can narrow down relevant communication using filters, streams, and statistics.
- You can understand basic protocol workflows and troubleshoot simple connection issues.
- You analyze time behavior and throughput using appropriate views.
- You document your observations using shipping documents and determine the next steps.
Brief explanations and demonstrations alternate with hands-on exercises. The explanations first cover basic procedures; in the exercises, you apply these on your own. Afterward, we discuss observations and solutions together. You will gradually build your own Wireshark work profile throughout the course.
The course uses prepared PCAP/PCAPNG files, exercises, and network diagrams. An additional homework assignment introduces participants to the comparison of two measurement points and extends the two-day program; further examples in the course materials are available for reference and independent practice.
Prerequisites: Basic knowledge of TCP/IP and client-server communication is required. Experience with Wireshark is not required.
Technical Requirements: A computer with a stable version of Wireshark installed.
- Network and System Administrators
- IT support and application administrators who want to get started with package analysis
.svg)