Hands-On Traffic Analysis with Wireshark - Let's practice!

This was a great room - a bit of a challenge, but we are up for it. Let's take a look at what filters we can use to solve this room quickly.

You can also check out my TryHackMe Wireshark Filters room at:

== More On-Demand Training from Chris ==

== Live Wireshark Training ==

== Private Wireshark Training ==

0:00 Intro and Task 1
1:36 Task 2 - Nmap Scans
7:56 Task 3 - ARP Poisoning
15:46Task 4 - DHCP, NetBIOS, Kerberos
23:25 Task 5 - DNS and ICMP
28:23 Task 6 - FTP Analysis
33:18 Task 7 - HTTP Analysis
40:36 Task 8 - Decrypting HTTPS
46:21 Task 9 - Bonus, Cleartext Creds
48:05 Task 10 - Firewall Rules

[axq]

The password filled in at ~13:43 for "Client986" is not clientnotthere!, but clientnothere! One character difference yet still accepted as a correct answer for the task. Very forgiving :-) Nice video, though!

[thomxs]

Hi Chris.

Just FYI, if you are going to make more THM content in the future, you can expand the VM view on THM in the bottoms left corner. It can really help, since most of the time, we don't really need to look at the questions on the left (with the extra space, maybe you can have your cam on at all time). Other than that, great stuff!

[MFmyk]

these videos have been helping me along in the soc level 1 thm path. If I could make any comment it would be helpful hearing YOU break down the lesson information instead of skipping to the answer portion of it. I want to understand these protocols, not just- print expression in display filter- copy answer. I have watched your lectures on tcp/ip and other beginer series videos for better understanding, but it feels overwhelming for a newbie.

[xrZt]

Love these THM video's of yours! Keep up the great job, Chris! 🙏

[Siamak_Saidi]

Hi @ChrisGreer,
I enjoy your videos every time, thanks a lot for your time.

[marcoful]

17:39
This man, even raps in his educational videos!
Keep up the content.

[adalparedes]

Thank you for taking your time and effort, I really appreciate you share this content. great work 😎

[CyberAvenger]

Thanks for the guidance I definitely got stuck on a few of the questions. Your video was very informative. Thanks again.

[slip]

this is gold. great info on how case sensitivity matters. It's a bit advance for me but would have been useful to walk through this prior to sec+

[idrisjibrin]

Great stuff Chris👍, keep them coming.👏👏👏👏

[PraveenRai]

WoW! this is awesome vlog series full of information ...wish could have these pcaps

[zeropanda]

I was going crazy about the number of display packets, I was frantically looking to see where!! thanks for pointing it out. although I am unsure how you knew of duplicates, or was it just a guess and then you confirmed it?

[MG-bmoj]

Hey Chris.. do you have any video where you explain all the pre-set filters that you have on wireshark? I saw in some of your videos, folders like nmap, server... and can be interesenting to know which one do you use to analize.

[mecyber]

i really loved how you teach wireshark, but your picture covering the most important part of the video!
hopefully you manage it in future videos, maybe resize it? anyway thank you sir :)

[cristofmanama]

excelent, god protect you. please make more content.

[Root-unonw]

Hey mate, was wondering if you could make a video on using Lua to create a script to focus on data of Interests like only HTTP requests rather then looking at a voluminous PCAP. Can be useful for a particular context.

[majiddehbi]

Hi Chris. Can u tell u is there any certificat of Wireshark tjhat we can take ? Thx

[mbbm-oodo]

13:26 how did you know there are repated

[johnvardy]

Hi Chris thanks for the feedback, you think is better to buy your course from Udemy?

[calvinnguyen]

Hi Chris. How can i use the wireshark check defined IP use----