01 - Network Troubleshooting from Scratch | Learn Wireshark @ SF22US

The title of this class is: "Network Troubleshooting from Scratch" and was taught by Jasper Bongertz. This was recorded on July 12th in Kansas City, MO.

SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.

SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.

SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both."

Chapters:
0:00 Intro
1:56 Principles of Troubleshooting
7:12 Troubleshooting Goals
10:28 Establishing Connection State
19:00 Time to live/Hop Count
30:46 Real World Scenario 1: "Evil Firewall"
56:45 Scenario 1 Conclusion
58:33 Connection Breakdown
1:01:01 Real World Scenario 2: "We have a problem"
1:08:22 Q&A

[harrysearia]

Thank you, this was easy for me to follow and understand.

[chess-is-life]

Excellent session! Thank you so much Jasper!

[saurabhm]

One of the best video on basic network troubleshooting.
Thanks for sharing for free 🙏🙏🙏

[toptalkers]

What a fantastic session, I learned a lot of new stuff. Thanks for sharing with us.

[shaboog]

Great content, hope to hear more from him.

[iSirLincoln]

Did not see the session in person but it wound up on my recommended. Great video and very informative.

[parishaymakers]

Awesome video! It got me interested in wireshark, thank you!

[staramod]

I feel like hearing Arnold Schwarzenegger :-)

[hh]

Firewalls, load balancers, and other network equipment can reduce TTL without being actual hops in the path. Traceroute will do a better job counting

[radhakrishna]

useful session. can we expect another session from Jasper regarding Throughput issues :)

[gilbertosampa]

I would like to know if it is possible to connect an Ethernet cable to my access point and in my notebook and configure Wireshark to see all the wireless traffic generated on the access point. It is possible to configure Wireshark to see wireless traffic on the Access Point over the ethernet cable. Thanks a lot for the help!

[saifemran]

I like your coloring columns, is there any chance you can share it?

[azndragon]

How do you set up a live capture 4G / 5G call processor with Wireshark? I know how to capture pcap trace file, but that can only be done from the EPC or 5G Core.

[zuftywe]

To effectively troubleshoot network issues using Wireshark during the SF22US conference, you should start by understanding your network layout and capturing traffic with a broad scope. Apply filters to narrow down to specific issues and capture traffic at strategic points. Familiarize yourself with key protocols like TCP, HTTP, and DNS. This process will help you analyze network traffic, identify problems, and troubleshoot effectively.

[josephkilonzo]

Hello Sir, how are you arriving at that no.of routers. For example, when i ping my gateway router, i 'm getting a TTL of 113. How do i calculate the no.of hops(routers)?

[ChapalPuteh_]

So the dissallowed ip range, on that subnet, no IP address were allowed .... /24 tell everything .. Unless you whitelisting the client IP address .. am i right ? Lets say i want to make a whitelisting option, we should dissallowed by /24, and allow just 1 IP (must be static), from the client ..

And the topology is Internal Network for the VM's ... right ?

and Wireshark is good for digging network artifact, but overall your video is clearly understandable ... thank you sir ..

[tahersadeghi]

In the case of Google's TTL of 112, How do you find out the number of hops? What formula do you use to find the number of hops?

[haybolrambol]

What could be the reason if I am getting this error "TCP ACked Unseen Segment" in my wireshark analysis? thanks

[MCroppered]

Please say "I'll be back" at the end of your videos

[hillierpallen]

Thank you for this video. I shared it with a few friends. They were so excited.. You are missing out on potential viewers by not using a service such as *promo sm*!!!