Next Generation Protocols and Advanced Network Analysis using Wireshark

Audience

This course is designed for Networking personnel that need to develop a set of packet investigation techniques through study of the Next Generation networking Protocols using Wireshark and other Open-Source Analysis tools. Successful completion of this course will provide these individuals with a path-way into the field of both Network and Forensics Analysis.

Course Description

Network and Forensics Analysis encompasses the skills of not only capturing
data, but also the ability to discern unusual patterns hidden within seemingly
normal network traffic. This course will provide the student with a set of
investigate and analysis techniques focusing on the use of vendor-neutral,
Open-Source Tools such as Wireshark to provide insight into the following areas:

  • Specialized and advanced packet capture techniques
  •  Recognition, analysis and threat recognition for a many of the
    next generation user protocol issues including IPv4/v6/v10,  DHCPv4/v6,
    SCTP, DNS/DNSSec/MDNS, ICMP(v4 /v6), Email Protocols (POP / SMTP / IMAP) ,
    File Transfer Protocols (FTP/TFTP/FIX/File Sharing) and common Internet
    based User Protocols (HTTP, VoIP, IRC, IM)
  •  Specialized Analysis techniques including suspicious data traffic
    reconstruction and viewing techniques.
Format

5 days Classroom Instruction

Start/End Times

08:30-17:00

Prerequisites

Completion of Wireshark 1

Language

English