Course outline

• How to choose the best method for capturing packets  (TAP, Mirorring, ...)
• How to setup and use capture filters
• How to setup and use display filters
• How to display columns based on  specific fields
• How to use profiles to  switch between different presets according to the data you have to analyse
• Advanced use of profiles, filters and Wireshark preferences
• Use of Time : reference, timestamp, format, delays
• DNS and name resolution troubleshooting
• ARP troubleshooting
• Advanced analysis of TCP : handshake, windows scaling, acknowledgments, buffers, retransmissions, ...)
• How to use Wireshark expert (out of order, Acked unseen, Zero Window, ...)
• Analysis of common protocols (ICMP,  HTTP, HTTPS,  FTP, SMB)
• Advanced use of statistics and graphs
• Command Line  tools

Feel free to ask for the detailed outline !

Prerequisites

Knowledge of TCP/IP networking fundamentals