UCIS 060 - Applied Wireshark

16 Noncredit Contact Hours
16 Lecture Hours 0 Lab Hours


This course was designed to teach the learner Wireshark for professional use. Learners will be provided instruction on Wireshark fundamentals and professional applications of the network protocol analyzer.

  

1. Apply the basics of Wireshark 
2. Identify advanced Wireshark features
3. Identify strategies that can be applied to specific job roles

1. Wireshark Basics 
   1. TCP/IP 
      1. Knowledge Check: Gauging where we are?
      2. Reminder of the basic TCP/IP concepts (what should have been made clear in the textbooks)
         1. ARP and Broadcast domains 
         2. What are ports really for?
         3. Sessions/Streams -Firewalls/NAT/Load Balancing
         4. DNS - the precursor of what’s to come 
         5. The importance of time 
      3. Wireshark the tool 
         1. Profiles - the toolbox 
         2. Color rules, and temporary ones 
         3. Export to make your point 
         4. How to do a capture - watch, log, and add comments 
   2. Making the Needle Glow in the Haystack
      1. Picking up from yesterday
         1. Sequence numbering, buffers, and the window (while the coffee is helping the brain)
      2. Capture/Display filters
         1. Capture filters - Dumpcap
         2. Display filters, the core of Wireshark
      3. Graphing - Seeing the needle 
         1. Explaining graphing and advancing graphing 
         2. The Time Sequence graph - the rarely mentioned champion for seeing problems. 
         3. Let’s build our toolbox and start to talk trouble
2. Getting Advanced 
   1. Approaching a capture 
      1. Strategy to capture 
         1. Location is important- what will the network look like?
         2. How to capture - on a host, mirror ports, taps, remote, over subscription 
         3. Initial Glance -Protocol Hierarchy, stats 
         4. Command line?
         5. Tools - nmap,iperf, verify MTU, TCP Wrangler 
         6. TLS? - collect the keys 
      2. Building display filters 
         1. Buttons, history, prepare/apply 
         2. Wealth in the right click 
      3. Walking through some common problems 
      4. What is most important?
   2. Diving into the needs of the team 
      1. Application of skills 
      2. Continuation of devling into defining expert information window items and what they mean 
      3. Tips and tricks with the command line 
      4. Building filters to solve specific problems
      5. Knowledge check: Progress made and what’s next