From the course: Wireshark: Malware and Forensics

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Packet analysis overview

Packet analysis overview - Wireshark Tutorial

From the course: Wireshark: Malware and Forensics

Start my 1-month free trial

Packet analysis overview

- On today's complex networks, administrators face multiple cyber threats. We respond in one of three ways. Proactive, and that is security where we actively try to prevent threats. Reactive, and that is forensics where we go in and assess the damage. And active is where we periodically check the network. Sniffing the network, or packet analysis is a valuable skill for the network administrator and should be part of every network administrator's skill set. We can scan an individual system, or we can look at the traffic that's flowing across the network. Network administrators should spend a few minutes every day and take a quick look at the traffic. This will give us a great deal of information on the status of the network. Sniffing traffic can gather network statistics, verify endpoint security status, and monitor protocol use. You can check, are there any protocols that should not be on your network. Such as unauthorized instant messaging, gaming or even bitcoin mining. Analyze…

Contents