This video explains how Wireshark works as a network traffic evidence acquisition tool.
- [Instructor] Wireshark is one of the most well known … packet or protocol analysis software programs. … This type of software is also called packet sniffer. … It captures the entire stack of network protocol layers … such as data link, network, transport and application. … We've already tried Wireshark on several occasions … and you know how feature-rich the tool is … in many different situations. … Personally I like how I can show packets … and their associated protocols in action in real time … when I explain networking concepts. … It's a powerful educational tool … but it's also a highly practical and useful tool … for network forensics professionals as you already know. … Once you get used to the basic features of Wireshark … it's time to learn some more advanced features … to make your life easier when using Wireshark. … One of the extra Wireshark features is filters. … Wireshark often gives you a sense of information overload … because there's just so much relevant information …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.