Thank you for sending your enquiry! One of our team member will contact you shortly.
Thank you for sending your booking! One of our team member will contact you shortly.
Course Outline
- Command-Line Tools and How to Use Them
- TShark and Dumpcap Command-Line Tools
- Capinfos Command-Line Tool
- Editcap Command-Line Tool
- Mergecap Command-Line Tool
- Text2pcap Command-Line Tool
- Split and Merge Trace Files
- Advance usage of Capture and Display Filters
- Writing advanced Capture filters scripts
- Writing Advanced Display filters
- Using triggered filters
- The Expert System Advance Usage
- Dealing with congestion - shattered windows and flooding
- Baseline network communications
- Unusual network communications
- Vulnerabilities in the TCP/IP resolution process
- Lab exercises and case studies
- Who is talking?
- Port Scans
- Mutant Scans
- IP Scans
- Application Mapping
- OS Fingerprinting
- Lab exercises and case studies
- VoIP Analysis
- SIP analysis and troubleshooting
- RTP, RTCP and media analysis
- Creating VoIP filters and analysis profiles
- Lab exercises and case studies
- Applications Analysis and Troubleshooting
- HTTP analysis and troubleshooting
- FTP analysis and troubleshooting
- DNS operation and troubleshooting
- Video transmission analysys
- Databases network-related problems
- Network Security and Forensics Basics
- Gather information – what to look for
- Unusual traffic patterns
- Complementary tools
- Detecting Security Suspicious Patterns
- MAC and IP address spoofing
- Attacks signatures and signature locations
- ARP poisoning
- Header and sequencing signatures
- Attacks and exploits
- TCP splicing and unusual traffic
- DoS and DDoS Attacks
- Protocol scans
- maliciously malformed packets
- Lab exercises and case studies
Requirements
In-depth knowledge of the TCP/IP protocol stack, along with participating in the “Basic Network Troubleshooting using Wireshark” course or equivalent knowledge. The participants should bring their laptops with Wireshark software (free download from the site - www.wireshark.org)
Testimonials
First of all it was very interesting practically for all topics covered by this training. Well balanced with theory, practise labs and breaks. Some of tips and tricks I have introduced to my work yet.
Dawid Woźny - Martyna Antonowicz, ATOS PGS sp. z o.o.
Course was very interesting and help me understood thoroughly protocols construction. I am very glad that i attended with this course.
Martyna Antonowicz, ATOS PGS sp. z o.o.
That the Wojciech Wójcik knowledge is really huge.
Kornel - Martyna Antonowicz, ATOS PGS sp. z o.o.
trainer listen to participants
Bartosz - Martyna Antonowicz, ATOS PGS sp. z o.o.
The exercises and analysis portion is very enriching and enlightening.
MINDEF
The network forensics portion to identify unusual network traffic and possible attacks through investigation of pcap files.
MINDEF
Related Courses
Understanding Multicast using IPv4
21 hours
Practical TCP/IP
28 hours
Understanding IPv6
14 hours
Understanding IPSec VPNs
14 hours
Cisco CCNA Syllabus in 5 Days
35 hours
VoIP with Cisco CallManager Express
35 hours
Tinc VPN
14 hours