Wireshark is a free network protocol analyser. This hands-on course provides a starting point for troubleshooting networks using Wireshark. The course concentrates on the Wireshark product and students will gain from the most from this course only if they already have a sound knowledge of the TCP/IP protocols.
TCP/IP Foundation for engineers (TPTCPIP)
By the end of the course delegates will be able to:
What is Wireshark?
Protocol analysers, Wireshark features, versions, troubleshooting techniques with Wireshark.
Installing Wireshark
Downloading Wireshark, UNIX issues, Microsoft issues, the role of winpcap, promiscuous mode, installing Wireshark. Wireshark documentation and help.
Downloading and installing Wireshark.
Capturing traffic
Starting and stopping basic packet captures, the packet list pane, packet details pane, packet bytes pane, interfaces, using Wireshark in a switched architecture.
Capturing packets with Wireshark.
Troubleshooting networks with Wireshark
Common packet flows.
Analysing a variety of problems with Wireshark.
Capture filters
Capture filter expressions, capture filter examples (host, port, network, protocol, worm), primitives, combining primitives, payload matching.
Configuring capture filters.
Working with captured packets
Live packet capture, saving to a file, capture file formats, reading capture files from other analysers, merging capture files, finding packets, going to a specific packet, display filters, display filter expressions.
Saving captured data, configuring display filters.
Analysis and statistics with Wireshark
Enabling/disabling protocols, user specified decodes, following TCP streams, protocol statistics, conversation lists, endpoint lists, I/O graphs, protocol specific statistics.
Using the analysis and statistics menus.
Command line tools
Tshark, capinfos, editcap, mergecap, text2pcap, idl2eth.
Using tshark.
Advanced issues
802.11 issues, management frames, monitor mode, packet reassembling, name resolution, customising Wireshark.
Customising name resolution.
Experience Wireshark 101 for engineers in South Africa through Bilginç IT Academy's live and interactive virtual classroom environment, accessible from your home, office, or any location. Connect with expert trainers in real time and bring the energy of classroom learning into the digital experience.
Experience Wireshark 101 for engineers in a focused classroom environment in South Africa. Bilginç IT Academy's carefully selected training venues provide a professional setting where delegates can interact directly with expert trainers and peers.
Meet your team's training needs with Bilginç IT Academy's onsite Wireshark 101 for engineers in South Africa solution, delivered at your office or preferred location. Align your team's development with your business goals through a training experience tailored to your organization.
Join our public courses in our South Africa facilities. Private class trainings will be organized at the location of your preference, according to your schedule.
South Africa is the most advanced technological market on the continent, with Cape Town and Johannesburg acting as world-class centers for fintech, telecommunications, and digital entrepreneurship. Cape Town’s vibrant tech scene, often called 'Silicon Cape,' attracts international venture capital and research talent, while Johannesburg remains the industrial and financial heart of technical innovation. The country's top universities, including the University of Cape Town and Wits, provide a strong academic foundation for research in Artificial Intelligence and Big Data. Our educational frameworks in South Africa focus on equipping the professional workforce with the high-level skills needed to manage complex enterprise infrastructures. We provide elite training in Cybersecurity, Enterprise Architecture, and Data Science to support South Africa's leading role in the global digital economy.
