TCP/IP Packet Analysis

Introduction
Introduction & Course Outline

TCP/IP Concepts
The OSI Model
The TCP/IP Protocol
TCP/IP Protocols & Model
How Network Communication Really Works

Basics of TCP & UDP Protocols
Introduction to TCP & UDP Protocols
TCP & UDP Ports
TCP Sequence Numbers
Windowing
TCP Flags
TCP 3-Way Handshake
Demonstration: TCP Session

TCP & UDP Packet Construction
Common Packet Construction
Taking Apart a TCP Packet
Demonstration - Taking Apart a TCP Packet
Examining a UDP Datagram
Demonstration - Examining a UDP Datagram

Basics of IP Protocols
IP Protocols
Breakdown of an IP Packet
Demonstration: An IP Packet Header
ICMP
ARP

Packet Analysis Tools
Wireshark
Tcpdump & WinDump
ColaSoft Packet Builder
HPing2
Scanning Tools

Packet Capturing
Packet Capturing with Wireshark pt. 1
Packet Capturing with Wireshark pt. 2
Recording & Using Packet Captures
Sniffing Switched vs. Non-Switched Traffic

Analyzing TCP/IP Traffic
Establishing Pattern & Timeline
Getting the Entire Session
Knowing What to Look For pt. 1
Knowing What to Look For pt. 2
Analyzing a Simple Traffic Capture

Analyzing Common Protocols
FTP
Telnet
HTTP
HTTPS
SMB & NetBIOS

Looking for Malicious Traffic
What Malicious Traffic Looks Like pt. 1
What Malicious Traffic Looks Like pt. 2
Excessive/Oversized/Fragmented Packets
TCP Flags
ICMP Attacks
Spoofed Traffic

Examining Wireless Traffic
Capturing Wireless Traffic pt. 1
Capturing Wireless Traffic pt. 2
Taking Apart a Wireless Session
Examining Wireless Traffic - WEP
Examining Wireless Traffic - WPA

Practical Applications of Traffic Analysis
Network Troubleshooting pt. 1
Network Troubleshooting pt. 2
Intrusion Detection
Network Forensics
Defeating Traffic Analysis pt. 1
Defeating Traffic Analysis pt. 2

Course Wrap Up
Wrap Up

About the Author
About the Author