I've used Wireshark for years (actually from way back when it was Ethereal) but thanks for the video. It has highlighted some newer features I was not aware of.
I have a capture of a WAP that was being attacked. The attacker spoofed an authorized MAC and duplicated every IP on the network thus disrupting the LAN. I isolated the WAP from the LAN and connected it to a laptop running Wireshark so I could determine what was going on with the WAP. Replaced the WAP with a newer one that can detect and block such attacks. Without Wireshark I would not have known for certain if it was an attack or a malfunctioning WAP.
Shannon Morse Thanks, but it was you and Darren doing things with Wireshark that gave me the idea. A bit of Googling on how to identify threats in Wireshark and I was armed. So, truth be told, I should be thanking you. You made me look like a Genius to my customer. Thank you. Thank you. Thank you.
Love Wireshark, and have been using it for years. Long before it was called wireshark (I think it was ethereal or something like that). Good start to a nice series.
Good Share , I wish I knew how you were shooting the video though of your screen in the background whilst your in the forefront. Pretty cool videos keep it up.
+Mark Robinson essentially the technique is achieved wth a green screen typically in which in post production "chroma key" is used in the editing software to isolate the green color specifically and thus replace that area with any desired effects(video,photo,etc)
Great show, Shannon. Is it possible to see where Ads in Skype are coming from? I see http requests appearing in WS, but there are many other types of packets that appear. How do I know which ones are related to the Skype Ads, to help me determine if I have adware or if this is genuinely being served by Skype?
you seem to have more options on what to capture than I do, is there a reason why?? I can capture wifi or local connections can you tell me why?? hoping for a reply..
Although not necessary, knowing how to maneuver your way around a network analyzer such as wireshark can prove quite useful when implementing software security
Wild statement. For starters, netsh doesn't run on other platforms. On linux you can hack USB comms too. Personally I've not looked at netsh for several years but because of your comments, I will and see how it stacks up.
The Aftermath Ahh, thanks for the clarification. I agree, windows does tend to be garbage sometimes. i've been using it lately because all the software I've been showing off just tends to work right in it. Also, my Linux laptop is very slow (an i3) so I like to use this one instead (an i5). Wireshark doesn't always play nice in VM's though, so I choose to just stay on the current OS. I can dual boot into a Linux os, but Windows 8 UEFI doesn't play nice all the time with trying to boot off a thumb drive.
