Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Intro to Protocol Analysis
This course introduces protocol analysis. Topics include protocol analysis tools, TCP/IP concepts, Internet protocols, network traffic analysis, monitoring network traffic, network security protocol analysis, and understanding data flow through protocol analysis. Upon completion, students should be able to perform simple protocol analysis to determine baseline network performance and identify anomalies.
Course Overview
SEC-110
1986 Pitt Tech Road
Humber Building
Winterville, NC 28590
- Providers
- Courses
- Course and Provider Quantity
Learning Objectives
1. Define Protocol Analysis | 2. Identify Key Features of Wireshark | 3. Demonstrate Traffic Capture | 4. Apply Custom Capture Filters | 5. Demonstrate Modification of Global and Personal Preferences | 6. Demonstrate Traffic Colorization | 7. Interpret Time Values and Summaries | 8. Interpret Basic Trace File Statistics | 9. Apply Custom Display Filters | 10. Reassemble Data Streams | 11. Demonstrate Wireshark Profile Customization | 12. Demonstrate Packet Export | 13. Demonstrate Wireshark’s Expert System | 14. Demonstrate how to analyze TCP/IP Packets | 15. Analyze Domain Name System (DNS) Traffic | 16. Analyze Address Resolution Protocol (ARP) Traffic | 17. Analyze Internet Protocol (IPv4/IPv6) Traffic | 18. Analyze Internet Control Message Protocol (ICMPv4/ICMPv6) Traffic | 19. Analyze User Datagram Protocol (UDP) Traffic | 20. Analyze Transmission Control Protocol (TCP) Traffic | 21. Interpret Graphical Traffic Trends | 22. Analyze Dynamic Host Configuration Protocol (DHCPv4/DHCPv6) Traffic | 23. Analyze Hypertext Transfer Protocol (HTTP) Traffic | 24. Analyze File Transfer Protocol (FTP) Traffic | 25. Identify the Top Causes of Performance Problems | 26. Analyze Suspect Traffic | 27. Demonstrate the use of Command-Line Tools | 28. Describe Normal Packet Flow
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Work Roles
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.