TCP/IP Packet Analysis

Both network administrators and IT security professionals must have the fundamental knowledge of TCP/IP to do their jobs. With that comes a necessity to be able to analyze TCP/IP traffic in order to troubleshoot network problems, analyze attacks, and better understand and secure their systems. Veteran VTC author, Bobby Rogers, will provide in-depth explanations for beginners and seasoned network professionals alike to enable them to understand the complex techniques of TCP/IP traffic analysis. To begin learning, simply click on the TCP/IP Packet Analysis movie links.

Introduction

Introduction & Course Outline

TCP/IP Concepts

The OSI Model
The TCP/IP Protocol
TCP/IP Protocols & Model
How Network Communication Really Works

Basics of TCP & UDP Protocols

Introduction to TCP & UDP Protocols
TCP & UDP Ports
TCP Sequence Numbers
Windowing
TCP Flags
TCP 3-Way Handshake
Demonstration: TCP Session

TCP & UDP Packet Construction

Common Packet Construction
Taking Apart a TCP Packet
Demonstration - Taking Apart a TCP Packet
Examining a UDP Datagram
Demonstration - Examining a UDP Datagram

Basics of IP Protocols

IP Protocols
Breakdown of an IP Packet
Demonstration: An IP Packet Header
ICMP
ARP

Packet Analysis Tools

Wireshark
Tcpdump & WinDump
ColaSoft Packet Builder
Hping2
Scanning Tools

Packet Capturing

Packet Capturing with Wireshark pt. 1
Packet Capturing with Wireshark pt. 2
Recording & Using Packet Captures
Sniffing Switched vs. Non-Switched Traffic

Analyzing TCP/IP Traffic

Establishing Pattern & Timeline
Getting the Entire Session
Knowing What to Look For pt. 1
Knowing What to Look For pt. 2
Analyzing a Simple Traffic Capture

Analyzing Common Protocols

FTP
Telnet
HTTP
HTTPS
SMB & NetBIOS

Looking for Malicious Traffic

What Malicious Traffic Looks Like pt. 1
What Malicious Traffic Looks Like pt. 2
Excessive/Oversized/Fragmented Packets
TCP Flags
ICMP Attacks
Spoofed Traffic

Examining Wireless Traffic

Capturing Wireless Traffic pt. 1
Capturing Wireless Traffic pt. 2
Taking Apart a Wireless Session
Examining Wireless Traffic - WEP
Examining Wireless Traffic - WPA

Practical Applications of Traffic Analysis

Network Troubleshooting pt. 1
Network Troubleshooting pt. 2
Intrusion Detection
Network Forensics
Defeating Traffic Analysis pt. 1
Defeating Traffic Analysis pt. 2

Course Wrap Up

Wrap Up

About the Author

About the Author