Post Views: 22,643

1-Day Instructor-Led Hands-On Lab Course
Available through Web-Based Live Delivery or On-Site Delivery
Minimum 10 Students – Maximum 20 Students

Course Description

You already know how to capture packets, navigate Wireshark, and perform basic analysis. Now it is time to take those skills to the next level.

The Advanced Wireshark Hackathon is an intensive one-day hands-on course designed for Wireshark users who want to become faster, more efficient, and more capable packet analysts. Rather than reviewing basic operations, this course concentrates on advanced techniques that can significantly improve the way you capture, isolate, analyze, visualize, and interpret network traffic.

Students explore advanced capture filtering, ring-buffer techniques, display filtering, file operations, statistics, graphing, and Wireshark customization. The course also examines advanced name-resolution techniques using Ethers and Hosts files and concludes with a brief exploration of Voice over IP analysis using Wireshark.

Wireshark is an extraordinarily powerful packet-analysis and troubleshooting platform, but experienced analysts know that productivity depends on much more than simply opening a packet capture. Effective analysis requires knowing how to reduce large amounts of traffic to the packets that matter, use statistics and visualization tools to identify patterns, customize Wireshark for specific analysis workflows, and quickly move from a symptom to useful packet-level evidence.

The Hackathon format emphasizes learning by doing. Students build on existing Wireshark skills while exploring techniques that can make everyday troubleshooting and packet analysis more effective.

This course helps answer questions such as:

How can I capture exactly the traffic I need without creating unnecessarily large packet captures?
How can ring buffers improve long-running or intermittent-problem captures?
How can advanced display filters help isolate important packet patterns more quickly?
How can Wireshark statistics and graphs expose network behavior that is difficult to see packet by packet?
How can Wireshark be customized to make repetitive analysis tasks easier?
How can Ethers and Hosts files improve name resolution and packet interpretation?
How can Wireshark be used to begin analyzing Voice over IP traffic?

Course Objectives

Upon successful completion of this course, students will be able to:

Take their existing Wireshark skills to a more advanced level.
Apply advanced Wireshark techniques involving:
- Filtering
- File operations
- Statistics
- Graphing

The objective is to help experienced Wireshark users work more efficiently and take greater advantage of the analysis capabilities already available within Wireshark.

Audience

This course is designed for professionals who already understand the fundamental operation of Wireshark and want to apply more advanced packet-analysis techniques to their job responsibilities.

Ideal participants include:

Operations personnel responsible for network configuration and support services
Network design engineers who use Wireshark as a troubleshooting and analysis tool
Technical sales professionals who need to correlate network features with actual protocol behavior
Technical marketing professionals who want more than a basic understanding of Wireshark
Network administrators

The course is particularly valuable for network operations, field technical personnel, engineering, test, customer support, and technical marketing professionals who regularly work with packet captures and want to improve the speed and effectiveness of their Wireshark analysis.

Course Prerequisites

This is an advanced Wireshark course. Students should already understand and be comfortable using Wireshark’s basic operations, including capturing packets, navigating packet details, opening and saving capture files, and performing basic packet filtering.

Students who do not yet have these skills should first complete one of CellStream’s Explore Packet Analysis with Wireshark – Standard Edition courses (see below).

Students should attend with a laptop computer running Windows, macOS, or Linux.

When the course is delivered in a classroom where suitable computers are provided, a student laptop may not be required.

Course Materials

Students receive a PDF Course Student Guide. Packet captures and supporting analysis materials are also provided through the CellStream Online School of Network Sciences.

Course Outline

Section 1: Course Introduction and Logistics

Section 2: Upgrading Wireshark

Section 3: Advanced Capture Filtering and Ring Buffers

Section 4: Advanced Display Filtering

Section 5: Advanced Statistics and Graphing

Section 6: Advanced Name Resolution – Using Ethers and Hosts Files

Section 7: A Brief Look at VoIP Analysis Using Wireshark

Course Availability:

View the course calendar and browse for our schedule. It will show scheduled courses and available dates for scheduling.

CSI-HO-020-E – Explore Advanced Packet Analysis with Wireshark Hackathon – 1 Day