Certificate Authentication

Introduction

• Wireshark -- not just a last-resort tool

Overview of Network Troubleshooting Concepts

• Root cause analysis

Installing Wireshark

Overview of Wireshark Features

• Navigating the UI interface

Capturing Traffic in the Test Environment

• Selecting the network interface
• Capture packets on wired and wireless networks

Analyzing the Logs

• Inspecting the HTTP packets
• Viewing back-and-forth TCP streams
• Saving the log for offline inspection

Analyzing Connection Speed Issues When Connecting to a Particular Website

• Using filters
• Seeing the statistics

Analyzing by Traffic Type

• DNS, ARP, IPv4, IPv6, ICMP, UDP, TCP, and HTTP/HTTPS
• Consistently slow connections over prolonged periods of time

Checking Response Times

• Setting delta time columns

Checking for Machines Infected with a Virus

• Inspecting ARP traffic

Inspecting Sources of Network Traffic

• Intel ANS probe
• Broken/misconfigured software (network flooding)

Pinpointing Performance Issues

• Creating statistical charts and graphs
• Setting colors in Wireshark
• Filtering traffic
• Using Wireshark Expert System and TCP/IP Resolution Flowchart

Troubleshooting Connections within a Secured Network Environment

• Proxies, firewalls and clients

Configuring Wireshark for Optimal Performance

•  Non-intrusive analysis

Troubleshooting

Summary and Conclusion