Tutorial: Packets don't lie: how can you use tcpdump/tshark (wireshark) to prove your point.

Sergey Guzenkov
linux.conf.au/...
We will look into:
differences between tshark and tcpdump,
tools that come with wireshark: dumpcap,capinfos, mergecap, tshark,
how to work with the capture files,
how to select the interface we want to capture on,
caveats in capturing (like vlans not being displayed),
capture and display filters, the difference between them,
statistics capabilities - this will be a big focus,
graphing,
decyphering SSL/TLS connection without access to server certificate.
Most of the tutorial will be done on the command line without a GUI.

[@_mvr_]

ping 127.1
respect++

[@archanakarnati]

Nice session, please let me know how to validate the checksum results using Tshark

[@archanakarnati]

By default TCP/UDP checkcum is displaying as "validation disabled", I want to enable the validation. Please anyone help me to do the same using TShark.

[@AndyDavis007]

sorry to post a UA-cam support question here but i haven't found a working google'd solution that works for me. does anyone know how to configure UA-cam so it doesn't T OFF (

[@magawla]

Too long video. There are some really useful information in the video but everything in this video could be explained in maximum 30 minutes.

[@GruntTV1776]

you are stupid. he is giving you loser gold.... you should be happy and honored that some one that understands this tool is trying to help your dumb ass

[@magawla]

@@musawilder4680 Oh yeah! Sure.

[@punggukbulan8674]

from where we get SSLKEYLOGFILE ?

[@AndyDavis007]

meanwhile i'll view it simply on my Chromebook screen

[@user-gu4ho3pj6h]

Just get on with it during seminars. Wasting BS time in the beginning.