This video is a good intro how to analyze a packet capture file or pcap, step by step. And even some content for people that already know Wireshark. #wireshark #pcap
BONUS Wireshark filter cheat sheet.
The scenario of this video is that you work for a company and the apps team is having an issue with their application. They have an app server that is talking to a web server, and something is just not right. They looked at their log files, but the error messages are not descriptive. Our task is to look at a packet capture and determine the issue.
If you have any questions or ideas for future videos, please leave a comment and let me know.
Timestamps:
00:00 Start
0:15 Free Wireshark filter cheatsheet
0:53 Scenario - Application issue
1:44 Using DNS filter to find a destination IP address
2:08 Building a filter to find a specific DNS query
3:56 Ephemeral port definition and graphic
5:44 Add a comment to a packet
5:55 Make a column to display comments
7:04 Cleartext password found in login POST - hacking :)
8:21 The great filter - show http requests and replies only
10:28 The real problem
11:31 Filter for only http errors and redirects aka gt 200
12:04 Filter for comments
12:21 Export displayed packets to a pcap file