4/13/2023 0 Comments Pcap analysisThis class will prepare students to tackle common problems and help them begin developing the skills to handle more advanced networking challenges. PCAP files play a critical role in network troubleshooting and security. Imagine it's your first day on the job as a junior security analyst and your assignment is to analyze a large packet capture (PCAP) file that was collected from a monitoring port configured on one of the core switches at a remote site. Some of the topics include capturing packets with tcpdump, mining DNS resolutions using only command-line tools, and busting obfuscated protocols. Large PCAP File Analysis 101 with Gigasheet, GreyNoise, and Google. This class covers open-source tools like tcpdump, Wireshark, and ChopShop in several lab exercises that reinforce the material. ![]() Introduction to Packet Capture (PCAP) explains the fundamentals of how, where, and why to capture network traffic and what to do with it. The lab materials are having sensitive materials removed and will be released soon.Ĭreator Available to Teach In-Person Classes: Yes A linux/BSD/Mac system with the previous tools is recommended (as it should come with tcpdump). Lab Requirements: tcpdump, Wireshark, and ChopShop. License: Creative Commons: Attribution, Share-Alike, Non-CommercialĬlass Prerequisites: A basic understanding of TCP/IP and OSI model, Python programming experience helps with exercises.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |