Course Outline
- Utilization of Command-Line Interface (CLI) Instruments
- Operational Procedures for TShark and Dumpcap
- Application of the Capinfos Utility
- Implementation of the Editcap Utility
- Execution of the Mergecap Utility
- Utilization of the Text2pcap Utility
- Methods for Segmenting and Consolidating Trace Files
- Advanced Application of Capture and Display Filters
- Development of Complex Capture Filter Scripts
- Construction of Advanced Display Filters
- Deployment of Triggered Filter Mechanisms
- Advanced Application of the Expert System
- Managing Network Congestion: Shattered Windows and Flooding
- Establishing Network Communication Baselines
- Identifying Anomalous Network Communications
- Security Vulnerabilities in TCP/IP Resolution Processes
- Practical Laboratory Exercises and Case Studies
- Identifying Communication Origins
- Analysis of Port Scanning Activities
- Examination of Mutant Scans
- Assessment of IP Address Scans
- Mapping Network Applications
- Operating System Fingerprinting Techniques
- Practical Laboratory Exercises and Case Studies
- Voice over IP (VoIP) Traffic Analysis
- Session Initiation Protocol (SIP) Diagnosis and Remediation
- Evaluation of RTP, RTCP, and Media Streams
- Development of VoIP Filters and Analysis Profiles
- Practical Laboratory Exercises and Case Studies
- Application Layer Analysis and Troubleshooting
- Hypertext Transfer Protocol (HTTP) Diagnosis and Remediation
- File Transfer Protocol (FTP) Diagnosis and Remediation
- Domain Name System (DNS) Operations and Issue Resolution
- Video Transmission Stream Analysis
- Diagnostics for Network-Related Database Issues
- Fundamentals of Network Security and Forensics
- Information Gathering: Key Indicators and Criteria
- Detection of Irregular Traffic Patterns
- Integration of Complementary Analytical Tools
- Identification of Security-Suspicious Patterns
- Mitigation of MAC and IP Address Spoofing
- Analysis of Attack Signatures and Vector Locations
- Detection of Address Resolution Protocol (ARP) Poisoning
- Examination of Header and Sequencing Signatures
- Analysis of Cyber Attacks and Exploits
- Investigation of TCP Splicing and Irregular Traffic
- Assessment of Denial of Service (DoS) and Distributed Denial of Service (DDoS) Attacks
- Evaluation of Protocol Scanning Mechanisms
- Analysis of Maliciously Formatted Data Packets
- Practical Laboratory Exercises and Case Studies
Requirements
Participants must possess detailed knowledge of the TCP/IP protocol stack, along with completion of the “Basic Network Troubleshooting using Wireshark” course or equivalent proficiency. Participants are required to bring portable computing devices with the Wireshark software installed (available for free download from the official repository at www.wireshark.org).
Testimonials (5)
Many exercises, good knowladge
Piotr Kucharski
Course - Advanced Network Troubleshooting Using Wireshark
interesting practical cases
Robert
Course - Advanced Network Troubleshooting Using Wireshark
First of all it was very interesting practically for all topics covered by this training. Well balanced with theory, practise labs and breaks. Some of tips and tricks I have introduced to my work yet.
Dawid Wozny - ATOS PGS sp. z o.o.
Course - Advanced Network Troubleshooting Using Wireshark
That the Wojciech Wójcik knowledge is really huge.
Kornel - ATOS PGS sp. z o.o.
Course - Advanced Network Troubleshooting Using Wireshark
trainer listen to participants