This 5-Day Wireshark Certified Network Analyst (WCNA) course is designed to lead the student from the basics of analyzing traffic and how an applications works and then continuing on to troubleshooting and CGRCturing and analyzing communications. This is a hands-on class. All concepts are reinforced by informal practice during the lecture followed by graduated lab exercises. Students will immediately be able to use Wireshark to complete tasks in the real world. Class is also geared as a WCNA exam prep course and students will be ready to take this exam at the end of training.
Learning Objectives
- Network Analysis Overview
- Introduction to Wireshark
- Capture Traffic
- Create and Apply Capture Filters
- Define Global and Personal Preferences
- Colorize Traffic
- Define Time Values and Interpret Summaries
- Interpret Basic Trace File Statistics
- Create and Apply Display Filters
- Follow Streams and Reassemble Data
- Customize Wireshark Profiles
- Annotate, Save, Export and Print Packets
- Use Wireshark's Expert System
- TCP/IP Analysis Overview
- Analyze Domain Name System (DNS) Traffic
- Analyze Address Resolution Protocol (ARP) Traffic
- Analyze Internet Protocol (IPv4/IPv6) Traffic
- Analyze Internet Control Message Protocol
- Analyze User Datagram Protocol (UDP) Traffic
- Analyze Transmission Control Protocol (TCP) Traffic
- Graph IO Rates and TCP Trends
- Analyze Dynamic Host Configuration Protocol
- Analyze Hypertext Transfer Protocol (HTTP) Traffic
- Analyze File Transfer Protocol (FTP) Traffic
- Analyze Email Traffic
- Introduction to 802.11 (WLAN) Analysis
- Voice over IP (VoIP) Analysis Fundamentals
- Baseline Normal Traffic Patterns
- Find the Top Causes of Performance Problems
- Network Forensics Overview
- Detect Scanning and Discovery Processes
- Analyze Suspect Traffic
- Effective Use of Command-Line Tools
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@hq.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.