Wireshark: Advanced Tools and Techniques

بواسطة: LinkedIn Learning

Overview

Learn how to optimize packet capture using CLI tools, sanitize captures, baseline traffic, capture session keys and decrypt traffic, and create IO and stream graphs.

Syllabus

Introduction

Enhance your skills
What you need to know

1. Tapping into the Stream

Enhance your skills
Network architecture
Tap into the network
Baselining the network
Restrictions and limitations
Challenge
Solution

2. Solving Network Problems

Network congestion
Case study: Spotify
Case study: Multicast
Merging traffic
Sanitizing packet captures

3. Capture Engines and Wi-Fi

Capture engines
Install Npcap
IEEE 802.11 overview
802.11 packet types

4. Command Line Capture

Optimize packet captures
tshark and dumpcap
text2pcap and capinfos
capinfos and editcap

5. IO and Stream Graphs

Basic IO graphs
Conversations and endpoints
TCP stream graphs
Advanced IO graphs

Conclusion

What's next?

Taught by

Lisa Bock

Computer Science / Wireshark

Wireshark: Advanced Tools and Techniques

الذهاب الي الدورة

Wireshark: Advanced Tools and Techniques

بواسطة: LinkedIn Learning

LinkedIn Learning
مدفوعة
الإنجليزية
متاح شهادة
متاح في أي وقت
الجميع
N/A

Messages Timeline Exceptions Views14 Route Queries6 Models5 Gate Session Request

8.1.2245ms2MBGET ar/الدورات/{slug}

Booting (142ms)
Application (102ms)
1 x Booting (58.2%)
142.37ms
1 x Application (41.56%)
101.67ms

14 templates were rendered

public.courses.show (resources/views/public/courses/show.blade.php)3bladefile
Params
0
course
1
links
2
config
public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
classes
public.courses.partials.details (resources/views/public/courses/partials/details.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.breadcrumbs (resources/views/public/courses/partials/breadcrumbs.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.courses.partials.heading (resources/views/public/courses/partials/heading.blade.php)7bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
classes
public.layouts.main (resources/views/public/layouts/main.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.layouts.partials.meta (resources/views/public/layouts/partials/meta.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.layouts.partials.navbar (resources/views/public/layouts/partials/navbar.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.auth.profile.partials.links (resources/views/public/auth/profile/partials/links.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.auth.profile.partials.link (resources/views/public/auth/profile/partials/link.blade.php)8bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config
6
route
7
title
public.layouts.partials.flash-session (resources/views/public/layouts/partials/flash-session.blade.php)6bladefile
Params
0
__env
1
app
2
errors
3
course
4
links
5
config

Params
0	`course`
1	`links`
2	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`
6	`classes`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`
6	`classes`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`
6	`route`
7	`title`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`
6	`route`
7	`title`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`
6	`route`
7	`title`

Params
0	`__env`
1	`app`
2	`errors`
3	`course`
4	`links`
5	`config`

uri: GET ar/الدورات/{slug}
middleware: web, localize:ar
controller: App\Http\Controllers\CourseController@show
as: ar.courses.show
namespace
prefix: /ar
where
file: app/Http/Controllers/CourseController.php:17-35

6 statements were executed15.56ms

select * from `courses` where `slug_ar` = 'wireshark:-advanced-tools-and-techniques' limit 1

13.68ms/app/Http/Controllers/CourseController.php:20corspedia

Metadata
Bindings	0. wireshark:-advanced-tools-and-techniques
Backtrace	17. /app/Http/Controllers/CourseController.php:20 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

update `courses` set `visitors` = `visitors` + 1, `courses`.`updated_at` = '2025-05-11 08:55:12' where `id` = 5205

990μs/app/Http/Controllers/CourseController.php:21corspedia

Metadata
Bindings	0. 2025-05-11 08:55:12 1. 5205
Backtrace	17. /app/Http/Controllers/CourseController.php:21 18. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 19. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 20. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 21. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select `id`, `name_en`, `name_ar`, `topic_id`, `slug_en`, `slug_ar` from `subjects` where `subjects`.`id` in (116)

230μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	20. /app/Http/Controllers/CourseController.php:23 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select `id`, `name_en`, `name_ar`, `slug_en`, `slug_ar` from `topics` where `topics`.`id` in (1)

180μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	25. /app/Http/Controllers/CourseController.php:23 26. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 27. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 28. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 29. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select * from `providers` where `providers`.`id` in (56) and `providers`.`deleted_at` is null

210μs/app/Http/Controllers/CourseController.php:23corspedia

Metadata
Backtrace	20. /app/Http/Controllers/CourseController.php:23 21. /vendor/laravel/framework/src/Illuminate/Routing/Controller.php:54 22. /vendor/laravel/framework/src/Illuminate/Routing/ControllerDispatcher.php:43 23. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:260 24. /vendor/laravel/framework/src/Illuminate/Routing/Route.php:205

select * from `html_files` where `html_files`.`id` = 5196 limit 1

270μs/app/Models/Course.php:84corspedia

Metadata
Bindings	0. 5196
Backtrace	21. /app/Models/Course.php:84 28. view::public.courses.show:29 30. /vendor/laravel/framework/src/Illuminate/Filesystem/Filesystem.php:125 31. /vendor/laravel/framework/src/Illuminate/View/Engines/PhpEngine.php:58 32. /vendor/laravel/framework/src/Illuminate/View/Engines/CompilerEngine.php:72

App\Models\HtmlFile: 1
App\Models\Provider: 1
App\Models\Topic: 1
App\Models\Subject: 1
App\Models\Course: 1

_token: xZenZHKOosrARHvsk5VIf2QxHzlptyE4ixGeD2DX
locale: ar
_previous: array:1 [ "url" => "https://www.corspedia.com/ar/%D8%A7%D9%84%D8%AF%D9%88%D8%B1%D8%A7%D8%AA/wiresh...
_flash: array:2 [ "old" => [] "new" => [] ]
PHPDEBUGBAR_STACK_DATA: []

path_info

/ar/%D8%A7%D9%84%D8%AF%D9%88%D8%B1%D8%A7%D8%AA/wireshark:-advanced-tools-and-techniques

status_code

status_text

format

html

content_type

text/html; charset=UTF-8

request_query

[]

request_request

[]

request_headers

  0 of 0   
array:24 [▼
  "cf-ipcountry" => array:1 [▶
    0 => "US"
  ]
  "cf-connecting-ip" => array:1 [▶
    0 => "3.18.213.37"
  ]
  "cdn-loop" => array:1 [▶
    0 => "cloudflare; loops=1"
  ]
  "x-forwarded-proto" => array:1 [▶
    0 => "https"
  ]
  "x-forwarded-for" => array:1 [▶
    0 => "3.18.213.37"
  ]
  "sec-fetch-site" => array:1 [▶
    0 => "none"
  ]
  "accept" => array:1 [▶
    0 => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
  ]
  "user-agent" => array:1 [▶
    0 => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
  ]
  "upgrade-insecure-requests" => array:1 [▶
    0 => "1"
  ]
  "sec-ch-ua-platform" => array:1 [▶
    0 => ""Windows""
  ]
  "sec-ch-ua-mobile" => array:1 [▶
    0 => "?0"
  ]
  "sec-ch-ua" => array:1 [▶
    0 => ""Chromium";v="130", "HeadlessChrome";v="130", "Not?A_Brand";v="99""
  ]
  "cache-control" => array:1 [▶
    0 => "no-cache"
  ]
  "pragma" => array:1 [▶
    0 => "no-cache"
  ]
  "sec-fetch-dest" => array:1 [▶
    0 => "document"
  ]
  "cf-ray" => array:1 [▶
    0 => "93e074bc3822874b-ORD"
  ]
  "accept-encoding" => array:1 [▶
    0 => "gzip, br"
  ]
  "priority" => array:1 [▶
    0 => "u=0, i"
  ]
  "sec-fetch-user" => array:1 [▶
    0 => "?1"
  ]
  "sec-fetch-mode" => array:1 [▶
    0 => "navigate"
  ]
  "cf-visitor" => array:1 [▶
    0 => "{"scheme":"https"}"
  ]
  "host" => array:1 [▶
    0 => "www.corspedia.com"
  ]
  "content-length" => array:1 [▶
    0 => ""
  ]
  "content-type" => array:1 [▶
    0 => ""
  ]
]

request_server

  0 of 0   
array:50 [▼
  "USER" => "www-data"
  "HOME" => "/var/www"
  "HTTP_CF_IPCOUNTRY" => "US"
  "HTTP_CF_CONNECTING_IP" => "3.18.213.37"
  "HTTP_CDN_LOOP" => "cloudflare; loops=1"
  "HTTP_X_FORWARDED_PROTO" => "https"
  "HTTP_X_FORWARDED_FOR" => "3.18.213.37"
  "HTTP_SEC_FETCH_SITE" => "none"
  "HTTP_ACCEPT" => "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"
  "HTTP_USER_AGENT" => "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
  "HTTP_UPGRADE_INSECURE_REQUESTS" => "1"
  "HTTP_SEC_CH_UA_PLATFORM" => ""Windows""
  "HTTP_SEC_CH_UA_MOBILE" => "?0"
  "HTTP_SEC_CH_UA" => ""Chromium";v="130", "HeadlessChrome";v="130", "Not?A_Brand";v="99""
  "HTTP_CACHE_CONTROL" => "no-cache"
  "HTTP_PRAGMA" => "no-cache"
  "HTTP_SEC_FETCH_DEST" => "document"
  "HTTP_CF_RAY" => "93e074bc3822874b-ORD"
  "HTTP_ACCEPT_ENCODING" => "gzip, br"
  "HTTP_PRIORITY" => "u=0, i"
  "HTTP_SEC_FETCH_USER" => "?1"
  "HTTP_SEC_FETCH_MODE" => "navigate"
  "HTTP_CF_VISITOR" => "{"scheme":"https"}"
  "HTTP_HOST" => "www.corspedia.com"
  "REDIRECT_STATUS" => "200"
  "SERVER_NAME" => "corspedia.com"
  "SERVER_PORT" => "443"
  "SERVER_ADDR" => "141.95.147.152"
  "REMOTE_USER" => ""
  "REMOTE_PORT" => "27406"
  "REMOTE_ADDR" => "172.70.131.61"
  "SERVER_SOFTWARE" => "nginx/1.18.0"
  "GATEWAY_INTERFACE" => "CGI/1.1"
  "HTTPS" => "on"
  "REQUEST_SCHEME" => "https"
  "SERVER_PROTOCOL" => "HTTP/2.0"
  "DOCUMENT_ROOT" => "/var/www/corspedia/public"
  "DOCUMENT_URI" => "/index.php"
  "REQUEST_URI" => "/ar/%D8%A7%D9%84%D8%AF%D9%88%D8%B1%D8%A7%D8%AA/wireshark:-advanced-tools-and-techniques"
  "SCRIPT_NAME" => "/index.php"
  "CONTENT_LENGTH" => ""
  "CONTENT_TYPE" => ""
  "REQUEST_METHOD" => "GET"
  "QUERY_STRING" => ""
  "SCRIPT_FILENAME" => "/var/www/corspedia/public/index.php"
  "PATH_INFO" => ""
  "FCGI_ROLE" => "RESPONDER"
  "PHP_SELF" => "/index.php"
  "REQUEST_TIME_FLOAT" => 1746953712.2945
  "REQUEST_TIME" => 1746953712
]

request_cookies

[]

response_headers

  0 of 0   
array:5 [▼
  "content-type" => array:1 [▶
    0 => "text/html; charset=UTF-8"
  ]
  "cache-control" => array:1 [▶
    0 => "no-cache, private"
  ]
  "date" => array:1 [▶
    0 => "Sun, 11 May 2025 08:55:12 GMT"
  ]
  "set-cookie" => array:2 [▶
    0 => "XSRF-TOKEN=eyJpdiI6IkYyamh4VWJmT2N6bEtiVmFKUDN4RUE9PSIsInZhbHVlIjoiTnlwbjhob2FaRjN5T29QekRoN1hESVV5ZkVwQmh3VVRVMlZvYW0vbitjdmFMeU1ITXZMTDRxQ2Z6VTVOdG1kckN1NHlRTThRRjlCY1J0YW9pUWEwellrKyt4ZU43dXJWQy9jeWhRRjJ5ejdjWjFVV0RBUW9KS3JDQmdna0Y1ckMiLCJtYWMiOiJjYmZhZjgzNWE4MzIzYmU1YmJlMDhhMDFlZTM1ZmVmZDMzZjQ1OTViMjllNzllOTZmNDBmMmQzYTVkZGQ5MWFmIiwidGFnIjoiIn0%3D; expires=Sun, 11 May 2025 10:55:12 GMT; Max-Age=7200; path=/; samesite=lax ◀XSRF-TOKEN=eyJpdiI6IkYyamh4VWJmT2N6bEtiVmFKUDN4RUE9PSIsInZhbHVlIjoiTnlwbjhob2FaRjN5T29QekRoN1hESVV5ZkVwQmh3VVRVMlZvYW0vbitjdmFMeU1ITXZMTDRxQ2Z6VTVOdG1kckN1NHlRT ▶"
    1 => "laravel_session=eyJpdiI6IjlKNjRtejdKajA1UTRDNXlYdElYcnc9PSIsInZhbHVlIjoibDIvVXFrT2ZRYjJxQk54dzVJYjRVODNZYlQ0MjhMZ0hJakRoNjhkUUhJazRMRXp0QzV6Mi8vYzV4NkUwYlpDTS80VTFjS1BoMG9ZbkFORE5UZVJzZmNoKzRLVHczZWJXYnNxVlYyN0hHU0VzL2lkMkFkcjY3dXNabHhnc1dyc28iLCJtYWMiOiJiOTUyZDJmZjNjZjc5ZDU3ODU5NWFmYWE3ZTdhMTJjOThmMGI0ZjZmMzdiZmZlNDBmNjhmMDQxNjE0NWUxMjA1IiwidGFnIjoiIn0%3D; expires=Sun, 11 May 2025 10:55:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax ◀laravel_session=eyJpdiI6IjlKNjRtejdKajA1UTRDNXlYdElYcnc9PSIsInZhbHVlIjoibDIvVXFrT2ZRYjJxQk54dzVJYjRVODNZYlQ0MjhMZ0hJakRoNjhkUUhJazRMRXp0QzV6Mi8vYzV4NkUwYlpDTS80 ▶"
  ]
  "Set-Cookie" => array:2 [▶
    0 => "XSRF-TOKEN=eyJpdiI6IkYyamh4VWJmT2N6bEtiVmFKUDN4RUE9PSIsInZhbHVlIjoiTnlwbjhob2FaRjN5T29QekRoN1hESVV5ZkVwQmh3VVRVMlZvYW0vbitjdmFMeU1ITXZMTDRxQ2Z6VTVOdG1kckN1NHlRTThRRjlCY1J0YW9pUWEwellrKyt4ZU43dXJWQy9jeWhRRjJ5ejdjWjFVV0RBUW9KS3JDQmdna0Y1ckMiLCJtYWMiOiJjYmZhZjgzNWE4MzIzYmU1YmJlMDhhMDFlZTM1ZmVmZDMzZjQ1OTViMjllNzllOTZmNDBmMmQzYTVkZGQ5MWFmIiwidGFnIjoiIn0%3D; expires=Sun, 11-May-2025 10:55:12 GMT; path=/ ◀XSRF-TOKEN=eyJpdiI6IkYyamh4VWJmT2N6bEtiVmFKUDN4RUE9PSIsInZhbHVlIjoiTnlwbjhob2FaRjN5T29QekRoN1hESVV5ZkVwQmh3VVRVMlZvYW0vbitjdmFMeU1ITXZMTDRxQ2Z6VTVOdG1kckN1NHlRT ▶"
    1 => "laravel_session=eyJpdiI6IjlKNjRtejdKajA1UTRDNXlYdElYcnc9PSIsInZhbHVlIjoibDIvVXFrT2ZRYjJxQk54dzVJYjRVODNZYlQ0MjhMZ0hJakRoNjhkUUhJazRMRXp0QzV6Mi8vYzV4NkUwYlpDTS80VTFjS1BoMG9ZbkFORE5UZVJzZmNoKzRLVHczZWJXYnNxVlYyN0hHU0VzL2lkMkFkcjY3dXNabHhnc1dyc28iLCJtYWMiOiJiOTUyZDJmZjNjZjc5ZDU3ODU5NWFmYWE3ZTdhMTJjOThmMGI0ZjZmMzdiZmZlNDBmNjhmMDQxNjE0NWUxMjA1IiwidGFnIjoiIn0%3D; expires=Sun, 11-May-2025 10:55:12 GMT; path=/; httponly ◀laravel_session=eyJpdiI6IjlKNjRtejdKajA1UTRDNXlYdElYcnc9PSIsInZhbHVlIjoibDIvVXFrT2ZRYjJxQk54dzVJYjRVODNZYlQ0MjhMZ0hJakRoNjhkUUhJazRMRXp0QzV6Mi8vYzV4NkUwYlpDTS80 ▶"
  ]
]

session_attributes

  0 of 0   
array:5 [▼
  "_token" => "xZenZHKOosrARHvsk5VIf2QxHzlptyE4ixGeD2DX"
  "locale" => "ar"
  "_previous" => array:1 [▶
    "url" => "https://www.corspedia.com/ar/%D8%A7%D9%84%D8%AF%D9%88%D8%B1%D8%A7%D8%AA/wireshark:-advanced-tools-and-techniques"
  ]
  "_flash" => array:2 [▶
    "old" => []
    "new" => []
  ]
  "PHPDEBUGBAR_STACK_DATA" => []
]

1 x Booting (58.2%)	142.37ms
1 x Application (41.56%)	101.67ms