Virtual Instructor-Led Training

Onsite Training

Troubleshooting TCP/IP Networks with Wireshark

Networking

<ul><li>TCP/IP Analysis Checklist</li><li>Top Causes of Performance Problems</li><li>Get the Latest Version of Wireshark</li><li>Capturing Traffic</li><li>Opening Trace Files</li><li>Processing Packets</li><li>GTK Interface</li><li>The Icon Toolbar</li><li>The Changing Status Bar</li><li>Right-Click Functionality</li><li>General Analyst Resources</li><li>Your First Task When You Leave Class</li></ul>

Introduction to Network Analysis and Wireshark

<ul><li>Checksum Issues at Capture</li><li>Analyze Switched Networks</li><li>Walk-Through a Sample SPAN Configuration</li><li>Analyze Full-Duplex Links with a Network TAP</li><li>Analyze Wireless Networks</li><li>Initial Analyzing Placement</li><li>Remote Capture Techniques</li><li>Available Capture Interfaces</li><li>Save Directly to Disk</li><li>Capture File Configurations</li><li>Limit Your Capture with Capture Filters</li><li>Examine Key Capture Filters</li></ul>

Learn Capture Methods and Use Capture Filters

<ul><li>First Step: Create a Troubleshooting Profile</li><li>Customize the User Interface</li><li>Add Custom Columns for the Packet List Pane</li><li>Set Your Global Capture Preferences</li><li>Define Name Resolution Preferences</li><li>Configure Individual Protocol Preferences</li></ul>

Customize for Efficiency: Configure Your Global Preferences

<ul><li>Move Around Quickly: Navigation Techniques</li><li>Find a Packet Based on Various Characteristics</li><li>Build Permanent Coloring Rules</li><li>Identify a Coloring Source</li><li>Apply Temporary Coloring</li><li>Mark Packets of Interest</li></ul>

Navigate Quickly and Focus Faster with Coloring Techniques

<ul><li>Examine the Delta Time (End-of-Packet to End-of-Packet)</li><li>Set a Time Reference</li><li>Compare Timestamp Values</li><li>Compare Timestamps of Filtered Traffic</li><li>Enable and Use TCP Conversation Timestamps</li><li>Compare TCP Conversation Timestamp Values</li><li>Troubleshooting Example Using Time</li><li>Analyze Delay Types</li></ul>

Spot Network and Application Issues with Time Values and Summaries

<ul><li>Examine Trace File Summary Information</li><li>View Active Protocols</li><li>Graph Throughput to Spot Performance Problems Quickly</li><li>Locate the Most Active Conversations and Endpoints</li><li>Other Conversation Options</li><li>Graph the Traffic Flows for a More Complete View</li><li>Numerous Other Statistics are Available</li><li>Quick Overview of VoIP Traffic Analysis Tools</li></ul>

Create and Interpret Basic Trace File Statistics

<ul><li>Display Filters</li><li>Filter on Conversations/Endpoints</li><li>Build Filters Based on Packets</li><li>Display Filter Syntax</li><li>Use Comparison Operators and Advanced Filters</li><li>Filter on Text Strings</li><li>Build Filters Based on Expressions</li><li>Watch for Common Display Filter Mistakes</li><li>Manually Edit the dfilters File</li></ul>

Focus on Traffic Using Display Filters

<ul><li>TShark and Dumpcap Command-Line Tools</li><li>Capinfos Command-Line Tool</li><li>Editcap Command-Line Tool</li><li>Mergecap Command-Line Tool</li><li>Text2pcap Command-Line Tool</li><li>Split and Merge Trace Files</li></ul>

Effectively Use Command-Line Tools

<ul><li>TCP/IP Functionality</li><li>When Everything Goes Right</li><li>The Multi-Step Resolution Process</li><li>Resolution Helped Build the Packet</li><li>Where Faults Can Occur</li><li>Typical Causes of Slow Performance</li></ul>

TCP/IP Communications and Resolutions Overview

<ul><li>DNS Overview</li><li>DNS Packet Structure</li><li>DNS Queries</li><li>Filter on DNS Traffic</li><li>Analyze Normal/Problem DNS Traffic</li></ul>

Analyze DNS Traffic

<ul><li>ARP Overview</li><li>ARP Packet Structure</li><li>Filter on ARP Traffic</li><li>Analyze Normal/Problem ARP Traffic</li></ul>

Analyze ARP Traffic

<ul><li>IPv4 Overview</li><li>IPv4 Packet Structure</li><li>Analyze Broadcast/Multicast Traffic</li><li>Filter on IPv4 Traffic</li><li>IP Protocol Preferences</li><li>Analyze Normal/Problem IP Traffic</li></ul>

Analyze IPv4 Traffic

<ul><li>ICMP Overview</li><li>ICMP Packet Structure</li><li>Filter on ICMP Traffic</li><li>Analyze Normal/Problem ICMP Traffic</li></ul>

Analyze ICMP Traffic

<ul><li>UDP Overview</li><li>Watch for Service Refusals</li><li>UDP Packet Structure</li><li>Filter on UDP Traffic</li><li>Follow UDP Streams to Reassemble Data</li><li>Analyze Normal/Problem UDP Traffic</li></ul>

Analyze UDP Traffic

<ul><li>TCP Overview</li><li>The TCP Connection Process</li><li>TCP Handshake Problem</li><li>Watch Service Refusals</li><li>TCP Packet Structure</li><li>The TCP Sequencing/Acknowledgment Process</li><li>Packet Loss Detection in Wireshark</li><li>Fast Recovery/Fast Retransmission Detection in Wireshark</li><li>Retransmission Detection in Wireshark</li><li>Out-of-Order Segment Detection in Wireshark</li><li>Selective Acknowledgement (SACK)</li><li>Window Scaling</li><li>Window Size Issue: Receive Buffer Problem</li><li>Window Size Issue: Unequal Window Size Beliefs</li><li>TCP Sliding Window Overview</li><li>Troubleshoot TCP Quickly with Expert Info</li><li>Filter on TCP Traffic and TCP Problems</li><li>Properly Set TCP Preferences</li><li>Follow TCP Streams to Reassemble Data</li></ul>

Analyze TCP Protocol

<ul><li>Build Advanced IO Graphs</li><li>Graph Round Trip Times</li><li>Graph TCP Throughput</li><li>Find Problems Using TCP Time-Sequence Graphs</li></ul>

Examine Advanced Trace File Statistics

<ul><li>HTTP Overview</li><li>HTTP Packet Structure</li><li>Filter on HTTP Traffic</li><li>Reassembling HTTP Objects</li><li>HTTP Statistics</li><li>Analyze Normal/Problem HTTP Traffic</li></ul>

Analyze HTTP Traffic

<ul><li>Examining SSL/HTTPS Traffic</li><li>Wireshark v1.6.0 Bug Alert #201106</li><li>Filter on SSL</li></ul>

Analyze SSL-Encrypted Traffic (HTTPS)

<ul><li>FTP Overview</li><li>FTP Packet Structure</li><li>Analyze Active Mode Connections</li><li>Analyze Passive Mode Connections</li><li>Filter on FTP Traffic</li><li>Analyze Normal/Problem FTP Traffic</li></ul>

Analyze File Transfer Protocol (FTP) Traffic

<ul><li>Baseline "NormalTraffic</li><li>Use Color</li><li>Look Who's Talking: Examine Conversations and Endpoints</li><li>Focus by Filtering</li><li>Create Basic IO Graphs</li><li>Examine Delta Time Values</li><li>Examine the Expert System</li><li>Follow the Streams</li><li>Graph Bandwidth Use, Round Trip Time, and TCP Time/Sequence Information</li><li>Watch Refusals and Redirections</li></ul>

Your 10 Key Troubleshooting Steps

<ul><li>Capture Traffic to/from Your Hardware Address</li><li>Create Your Troubleshooting Profile</li><li>Set Basic Preferences for Your Troubleshooting Profile</li><li>Find, Mark, Save, and Colorize Packets</li><li>Detect and Colorize High Latency Indications</li><li>Find the Top Talkers and Protocols/Applications on a Network</li><li>Create and Use an IO Graph to Spot Performance Issues</li><li>Locate a Text String in a Trace File</li><li>Use Tshark to Capture Traffic to/from Other Hosts on the Network</li><li>Split a Large Trace File Based on Time-Per-File and Merge Trace Files</li><li>Create a Coloring Rule to Detect DNS Error Responses and Suspicious DNS Responses</li><li>Analyze a Network Problem Indicated by ARP</li><li>Filter on a Range of IPv4 Addresses</li><li>Detect Suspicious Traffic with a New ICMP Coloring Rule</li><li>Analyze UDP-Based Multicast Streams and Queuing Delays</li><li>Alter Coloring of Window Update Packets</li><li>Use TCP Timestamps and New Coloring Rules to Locate TCP Performance Issues and Questionable Window Sizes</li><li>Determine Who is at Fault and Work with Multiple Trace Files</li><li>Determine the Cause of Slow File Downloads</li><li>Use TCP Graphs to Detect the Cause of Performance Problems</li><li>Create a Coloring Rule for HTTP Error Responses</li><li>Export an HTTP Object</li><li>Decrypt HTTPS Communications</li><li>Analyze FTP Problems</li></ul>

LABS

Liferay

courseBanner

Course Banner

courseOverview

Course Overview section

courseAnnouncement

Additional information.

courseDetails

What you will learn

targetAudience

Who should attend

courseOutline

Course Outline

courseFAQ

Coursepromobanner

Course Promobanner Section

courseRelatedTargets

Course Related Targets

courseTicker

Course Ticker

preRequisites

Prerequisites

courseTestimonials

Customer Testimonials

courseLocations

Find More Locations by NetCom Learning For This Training

For Your convenience we are offering This course at more locations. Expand your training options and accelerate your learning journey with NetCom.

Learn to use Wireshark to identify the most common causes of performance problems in TCP/IP communications.

Microsoft

AI CERTs™

Google Cloud

Cisco

Amazon Web Services

CompTIA

EC-Council

ISC2

ITIL

Autodesk

AI & Data

Cloud

Security

App Development

Architecture & Design

Business Applications

Business Process

Business & Leadership

e-Learning

Trainings

Managed Learning Services

NetCom365

Learning Passport

EdAssist

Talents for Hire

NetCom Learning Academy

AI Summer Skill Fest 2025

Financial Services

Healthcare

Federal Government

State & Local Government

Technology

Complimentary AI+ Foundation™ Training

Free AI Training Consultation

AI Certs Training Bundles

CompTIA Continuing Education (CE)

CompTIA Exam Prep e-Learning Bundles

Microsoft ECIF Program

Microsoft QuickStart Program

Microsoft Partner Training

Microsoft AI Bootcamp for Educators

Microsoft Applied Skills

AWS Skill Builder

AWS Blended Learning

AWS Learning Needs Analysis (LNA)

AWS e-Learning

Cisco Continuing Education (CE)

Cisco Learning Credits

Cisco U

Free Networking Training Consultation

Google Cloud Leadership AI Training

Solutions

Resources

Company

<p>Troubleshooting TCP/IP Networks with Wireshark provides techniques for analyzing and resolving network issues using Wireshark's advanced tools.</p>

Troubleshooting TCP/IP Networks with Wireshark

Upcoming Schedules

Course Outline