This course covers basic sniffing as part of a penetration test. Attackers and penetration testers use sniffing to analyze network packets for information.
Learning Objectives
By the end of this course, students should be able to:
- Use Wireshark and TCPDump to analyze captured network traffic.
- Use Wireshark and TCPDump filters to perform packet analysis.
Framework Connections
Specialty Areas
- Exploitation Analysis
- Network Services
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.