00 — Overview

Network Traffic Analysis

Capture and analyse packets to find credentials, detect attacks, and reconstruct sessions. Wireshark and tshark from first principles.

Intermediate·45 min·4 tasks
// By the end of this module
Capture network traffic with tcpdump and tshark
Filter and analyse pcap files to isolate protocols of interest
Extract cleartext credentials from FTP, Telnet, and HTTP captures
Reconstruct sessions from packet captures to understand attacker activity
// Prerequisites
Complete these before starting this module for the best experience.