Post Views: 14,323

1-Day Instructor-Led Hands-On Lab Course
Available through Web-Based Live Delivery or On-Site Delivery
Minimum 8 Students – Maximum 16 Students

What Students are saying about this class

“[The instructor] explains things in a way that any of us can understand.”
“Seeing scenarios first hand. Knowing where to look.”
“Like that it is almost all hands on and not just talking and slideshows.”
“Instructor presents everything very clearly and enthusiastically”
“Like how the instructor periodically comes back to the same core concepts to reinforce them”
“The best part was learning about all of the most useful features and tools in Wireshark, and the hands on exercises in the lab were particularly good at highlighting how to get the most out of the tool. Also Andy Walding is and EXCELLENT instructor he did an excellent job of covering the most important aspects of the tools and protocols and he has a very deep understanding of the subject material.”
“The Online School is a great resource, I’m glad to know that this school exists!”

Course Description

QUIC has changed the way modern Internet applications transport data. Unlike traditional TCP-based application transport, QUIC operates over UDP, integrates strong security, supports multiple streams within a connection, and serves as the transport foundation for HTTP/3. These characteristics provide important performance and operational benefits, but they also create new challenges for network technicians and packet analysts who need to understand what is happening on the network.

Wireshark QUIC Analysis in a Day is an intensive one-day hands-on course designed to develop practical skills for capturing, decrypting, analyzing, and troubleshooting QUIC communications using Wireshark. Using a “follow me” learning approach, students work alongside the instructor while examining real QUIC packet captures and learning how Wireshark exposes this modern transport protocol.

Students begin by verifying and customizing Wireshark specifically for QUIC analysis. Because much of QUIC is encrypted, the course then focuses on one of the most important practical skills required for meaningful analysis: decrypting QUIC traffic so that its protocol behavior and application information can be examined.

Once traffic is decrypted, students learn how to navigate QUIC packets, identify connections, examine protocol behavior, apply useful Wireshark filtering techniques, and determine what packet-level evidence can reveal about QUIC communications.

The emphasis throughout the course is not simply on locating QUIC packets, but on understanding what Wireshark can see, what encryption normally hides, what becomes visible after decryption, and how that information can be used during troubleshooting.

The course concludes by bringing these skills together into a repeatable QUIC troubleshooting workflow that students can use when investigating QUIC and HTTP/3 communications in real networks.

This course helps answer questions such as:

What is QUIC, and how is its operation different from traditional TCP-based communications?
Why does QUIC use UDP?
How should Wireshark be customized specifically for QUIC analysis?
What parts of QUIC traffic can Wireshark analyze without decryption?
Why is QUIC decryption important for detailed packet analysis?
How can QUIC traffic be decrypted and examined using Wireshark?
What can decrypted QUIC packets reveal about connection and application behavior?
How does QUIC relate to HTTP/3?
How can Wireshark be incorporated into a repeatable QUIC troubleshooting process?

Course Objectives

Upon successful completion of this course, students will be able to develop practical, hands-on skills for using Wireshark to analyze QUIC communications in the following key areas:

Decrypt QUIC traffic for detailed packet analysis.
Customize Wireshark specifically for QUIC analysis.
Identify and isolate QUIC traffic within packet captures.
Analyze decrypted QUIC communications using Wireshark.
Understand the importance and limitations of visibility when analyzing encrypted QUIC traffic.
Develop a repeatable QUIC analysis and troubleshooting workflow that can be applied in daily operations.

Audience

This course is designed for networking professionals who need practical skills for using Wireshark to analyze and troubleshoot QUIC communications.

Ideal participants include:

Central-office and field technicians who need to capture and analyze QUIC traffic
Network administrators and support personnel responsible for QUIC-related problems
Operations personnel responsible for network configuration, monitoring, and support
Network design engineers who use Wireshark as a QUIC analysis and troubleshooting tool
Technical marketing professionals working with QUIC and modern Internet technologies
Technical sales professionals who need to correlate protocol features with actual network behavior
Engineering, test, and customer-support personnel who need greater visibility into QUIC communications

The course is particularly valuable for technicians, engineers, network operations personnel, and support teams who are increasingly encountering QUIC traffic and need to understand what remains visible, what is encrypted, and how Wireshark can be used to investigate it.

Course Prerequisites

This course is designed for anyone who needs practical skills for analyzing QUIC traffic using Wireshark.

The ideal student has some previous experience with Wireshark and a basic understanding of data networking and TCP/IP. However, the guided hands-on format allows students to follow the instructor through each analysis exercise without requiring advanced prior QUIC knowledge.

Students should attend with a laptop computer running Windows, macOS, or Linux with a current operational version of Wireshark installed.

Class size is limited to 16 students.

Course Materials

Students receive a PDF Course Student/Lab Guide.

Access to specialized QUIC Wireshark profiles, packet captures, and supporting analysis materials is also provided through the CellStream Online School of Network Sciences.

Course Outline

Section 1: Course Introduction and Logistics

Section 2: Verifying and Customizing Wireshark for QUIC Analysis

Section 3: Decrypting QUIC Traffic

Section 4: Analyzing Decrypted QUIC Traffic

Section 5: Developing the QUIC Troubleshooting Workflow

Course Availability:

View the course calendar and browse for our schedule. It will show scheduled courses and available dates for scheduling.

CSI-HO-020-M – Wireshark QUIC Analysis in a Day – 1 Day