Network Traffic Analysis with Wireshark

About this course

See exactly what is happening on your network, packet by packet. In three practical days you will learn where and how to capture traffic, find your way around Wireshark, and use capture and display filters to cut through the noise to the packets that matter.

You will analyse core and application protocols, including TCP, DNS and HTTP, to troubleshoot slow or failing connections, then turn to security: spotting scans and suspicious traffic, extracting files and documenting your findings clearly.

What you'll learn

• Capture network traffic in the right place and in the right way
• Navigate Wireshark efficiently and customise it for analysis
• Apply capture and display filters to isolate relevant packets
• Analyse common protocols including Ethernet, IP, TCP, UDP, DNS and HTTP
• Diagnose performance and connectivity problems from packet evidence
• Recognise signs of scanning, malware and other suspicious activity
• Extract files and objects and document findings clearly

Curriculum

Who it's for

Network administrators, support engineers and security analysts who want to troubleshoot and investigate networks using packet analysis.

Before you start

• Working knowledge of TCP/IP networking
• Basic familiarity with the command line

Part of these Alalamia diplomas

• Alalamia Diploma in Computer Networking
• Alalamia Diploma in Cybersecurity Analysis