GitHub - NetsecExplained/Advanced-Wireshark-Network-Forensics: If you've ever picked up a book on Wireshark or network monitoring, they almost all cover about the same information. They'll show you, "Here's an ARP frame, here's an IP packet, here's a web request..." But what they don't go into is: when you open a Pcap file for the first time, where do you start? What are the things that you look for? And how do you find them? So my goal here is to help you bridge that gap between having a basic understanding of network protocol analyzers, and using them to solve real world problems.

NetsecExplained / Advanced-Wireshark-Network-Forensics Public

Notifications You must be signed in to change notification settings
Fork 6
Star 19

If you've ever picked up a book on Wireshark or network monitoring, they almost all cover about the same information. They'll show you, "Here's an ARP frame, here's an IP packet, here's a web request..." But what they don't go into is: when you open a Pcap file for the first time, where do you start? What are the things that you look for? And ho…

19 stars 6 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
Hackers on the Network.pcapng		Hackers on the Network.pcapng
Scenario 1.pcapng		Scenario 1.pcapng
Scenario 2.pcap		Scenario 2.pcap