How DNS Works Under the Hood (Packet by Packet) Chris Greer 2026-09-18 | How DNS Works Under the Hood (Packet by Packet)
Wireshark has a sibling... (Stratoshark for the cloud!) Chris Greer 2025-01-22 | Welcome to the world Stratoshark! In this video we interview the creator of Wireshark - Gerald Combs. He tells us about Wireshark's new baby brother, why it was needed, what visibility gap it fills, and how to download it. You can install Stratoshark by going to stratoshark.orgNote you can download a sample scap (note, not pcap!) and follow along as Gerald guides us through this new syscall/log analyzer! Stratoshark Wiki: wiki.wireshark.org/StratosharkThanks Gerald and congrats to you and the Wireshark Foundation for this new release. Want more packets? == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom== Social ===LinkedIn - linkedin.com/in/cgreerX Twitter - twitter.com/packetpioneer== Chapters ==0:00 Welcome Gerald0:52 Announcing Stratoshark1:56 What are system calls?2:23 Why "Stratoshark"?3:34 Where it captures4:41 How to get Stratoshark5:28 Stratoshark Demo!7:52 What is next?
Learning TCP? You HAVE to master this Chris Greer 2025-01-09 | Learning how tcp sequence numbers work is a foundational concept to master when analyzing this protocol. In this video we explain TCP Sequence numbers simply. You know what to do packet people - download and follow along! github.com/packetpioneer/youtube/blob/main/tls-handshake.pcapngIf you like, please let me know!! It helps. Really. Want more packety goodness? == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Check out this TCP Stream Filter! Chris Greer 2024-12-19 | Setting TCP stream filters can be a pain if we have to do them one by one. Check out this filter that can make it faster! ==Filter==tcp.stream==${tcp.stream}Add -1 or +1 to the end to go back or forward one stream. Thanks to Sake Blok - https://www.SYN-bit.nl - who shared this filter at Sharkfest Europe 2024 in Vienna, Austria. For more information on Sharkfest and how to attend - sharkfest.wireshark.orgLink to pcap: github.com/packetpioneer/youtube/blob/main/tcp-sequencesample.pcapngLink to profile: github.com/packetpioneer/profiles/blob/main/Chris-TCPPlain.zipIf you like this content, let me know by subbing! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Private Wireshark Training ==Let's get in touch - https://packetpioneer.com/product/pri...
Watch what you type!! Or they will... Chris Greer 2024-11-05 | Lets dig into a Keylogger malware infection and see what gets exfiltrated out to the listener. Download the packets here: malware-traffic-analysis.net/2024/09/17/index.html (Thanks Brad!)Password to unlock: infected_20240917Best to analyze this pcap in an isolated VM. You've been warned. Want more packets? == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomThank you to Brad Duncan for the pcap samples that I was not able to create on my own! For professional inquiries please contact me at packetpioneer@gmail.com
Check out this button! Chris Greer 2024-10-29 | This button was added to a recent update of Wireshark. It will automatically reset the three panes of the layout. Check it out!
3 Tips for Wireshark Beginners Chris Greer 2024-10-16 | Are you diving into the world of Wireshark but finding it overwhelming? You’re not alone! Many beginners feel frustrated when they first start using this powerful network analysis tool. In this video, we’ll tackle those common challenges and provide you with three essential tips to help you stay motivated on your Wireshark learning journey.The pcap shown on this video was taken from malware-traffic-analysis.net. Thanks Brad!If you like this content, let me know by subbing! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom== Social ===LinkedIn - linkedin.com/in/cgreerX Twitter - twitter.com/packetpioneer
Is DECRYPTION really necessary? Chris Greer 2024-10-07 | Is packet analysis still useful in our encrypted age? Yes! In this video, we’ll look at how you can still analyze quite a bit in encrypted TCP-based traffic. While encryption can make network analysis challenging, there are still valuable insights to be gained.We will be using this pcap in the video so download and follow along. github.com/packetpioneer/youtube/blob/main/tls-handshake.pcapngIf you like this content, let me know by subbing. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom== Social ===LinkedIn - linkedin.com/in/cgreerX Twitter - twitter.com/packetpioneer
I wish I new this filter SOONER!! Chris Greer 2024-01-17 | I use this filter all the time to isolate traffic that runs over different TCP ports. You can do the same thing with UDP ports. The membership operator is a fantastic filter to learn with Wireshark!If you like this content, let me know by subbing! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom== Social ===LinkedIn - linkedin.com/in/cgreerX Twitter - twitter.com/packetpioneer
Wish I knew this filter sooner!! #shorts Chris Greer 2023-07-06 | In this video we look at the membership operator in Wireshark. To learn more check out my Udemy course - bit.ly/udemywireshark
Quick SUBNET filter!! #shorts Chris Greer 2023-06-22 | This is a quick filter on how to isolate the IPs in a subnet. #shorts For more Wireshark check out my Udemy course! bit.ly/udemywireshark
The TOP THREE Wireshark Filters! #shorts Chris Greer 2023-05-25 | Let's learn the top three filters that I use in almost any pcap I analyze. Let's dig! #shorts Learn more - bit.ly/udemywireshark
Analyze Traffic Faster with Custom Columns! Chris Greer 2023-05-05 | Columns are great in speeding up analysis. But sometimes we add a column that works for some protocols and not others. In this video we will look at how to add a custom column that we can use to quickly see both the UDP and TCP ports in Wireshark. Let's dig!If you like this content, let me know by subbing! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Getting Started with Nmap - Full Course with @davidbombal!! Chris Greer 2023-03-01 | David Bombal and I teamed up to create an Nmap course that digs deep into the network scans and shows how they work. We learn how to capture the scans with Wireshark to analyze what really happens on the wire. Check it out!bit.ly/udemynmapDon't mean to throw a commercial at you guys but you supporting me this way really helps me keep the channel going, so thank you to all who take the course! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomFor more info on training or consulting engagements with Wireshark, Nmap, or other tools, check out my website at:www.packetpioneer.com
SPYWARE Analysis with Wireshark - STOLEN LOGINS! Chris Greer 2023-02-23 | In this video we are going to take a look at how Agent Tesla Spyware works. Using an exercise from malware-traffic-analysis.net, we will learn what indicators to look for as this Spyware steals user credentials. Let's dig! Get the pcaps here - malware-traffic-analysis.net/training-exercises.html== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomQuestions? Comments? You know what to do below!Chapters:0:00 Intro0:40 Get the PCAP1:52 Victim's IP Address3:48 Stolen Credentials5:50 Decoding Base64 Logins
Hands-On Traffic Analysis with Wireshark - Lets practice! Chris Greer 2023-02-07 | This was a great room - a bit of a challenge, but we are up for it. Let's take a look at what filters we can use to solve this room quickly. tryhackme.com/room/wiresharktrafficanalysisYou can also check out my TryHackMe Wireshark Filters room at:tryhackme.com/jr/wiresharkfilters== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom0:00 Intro and Task 11:36 Task 2 - Nmap Scans7:56 Task 3 - ARP Poisoning15:46Task 4 - DHCP, NetBIOS, Kerberos23:25 Task 5 - DNS and ICMP28:23 Task 6 - FTP Analysis33:18 Task 7 - HTTP Analysis40:36 Task 8 - Decrypting HTTPS46:21 Task 9 - Bonus, Cleartext Creds48:05 Task 10 - Firewall Rules
How to Start Hacking Websites Chris Greer 2023-02-02 | Watch as Nahamsec shows us how to hack Cisco.com legally. Before going further with a Bug Bounty or red team engagement, we first need to understand the attack surface. Active recon is a way to learn which sites, APIs, or hidden links are accessible. Follow along as Ben shows us how! Like, share, subscribe if you think this is good content! // Links and things //Nahamsec Channel - youtube.com/@UCCZDt7MuC3Hzs6IH4xODLBw Nahamsec Website - nahamsec.comHacker 101 - hacker101.comTryHackMe - tryhackme.comIntro to Bug Bounty - udemy.com/course/intro-to-bug-bounty-by-nahamsec== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomChapters:0:00 Welcome Nahamsec!0:32 Active Recon1:10 Let's Hack Cisco4:10 First steps6:15 Anyone can do this8:08 What next?packetpioneer.com
The Top 3 Web VULNERABILITIES with Nahamsec Chris Greer 2023-01-26 | In this video, Nahamsec tells us the top 3 vulnerabilities he looks for on hacking engagements or bug bounties. Complete with a war story or two! Like, share, subscribe if you think this is good content! // Links and things //Nahamsec Channel - youtube.com/@NahamSec Nahamsec Website - nahamsec.comHacker 101 - hacker101.comTryHackMe - tryhackme.comVulnHub - vulnhub.comIntro to Bug Bounty - udemy.com/course/intro-to-bug-bounty-by-nahamsec== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomChapters:0:00 Welcome Nahamsec!0:32 Top Three Vulns1:23 How does SSRF work? 4:00 Can we see this in Wireshark?5:28 How can I learn more?6:55 What is next?packetpioneer.com
How to Use the TCP Completeness Value in Wireshark Chris Greer 2023-01-24 | This field is one that I am looking at more and more in my network and application analysis. The TCP completeness field can help when finding scans, unused connections, or resets. Here is a link to the pcap I use in the video - packetpioneer.com/wp-content/uploads/tcp-completeness-chrisgreer.pcapng.zipLink to the Wireshark TCP Analysis writeup - wireshark.org/docs/wsug_html_chunked/ChAdvTCPAnalysis.htmlWant some hands on with TCP? Consider taking one of my courses. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Should Hunters/Hackers learn Wireshark? #shorts Chris Greer 2023-01-20 | In this YouTube short, Chris and David quickly explain why Wireshark is a great tool to learn for hacking and hunting roles in infosec. For more information, check out their Wireshark course on Udemy. bit.ly/udemywireshark #shorts
Learn Web Hacking with @Nahamsec // Top 3 Skills Chris Greer 2023-01-17 | Web is everywhere. In order to protect it, we need to know how it works, how to find its weaknesses, and what to do if we find one! In this series, Nahamsec himself joins Chris on a journey to learn how to hack websites for vulnerabilities. Whether the goal is to project our own environment, learn Bug Bounty, or sheer interest, web hacking is becoming an important skill to learn and master. Let's do this packet people! Please like, share, subscribe if you like this content!== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom// Links and things //Nahamsec Channel - youtube.com/@NahamSec Nahamsec Website - nahamsec.comIntro to Bug Bounty - udemy.com/course/intro-to-bug-bounty-by-nahamsecTCP for Hackers - training.defcon.org/pages/def-con-trainings-bellevue-april-2023Chapters:0:00 Welcome Nahamsec!0:42 Why Learn Web Hacking?1:23 Is this legal? 2:28 Top Three Skills to Learn Web Hacking4:43 Can I get a job? packetpioneer.com
3 Things to Look For in EVERY TCP Handshake Chris Greer 2023-01-10 | What should we look for in any TCP Handshake we see? This video goes into the top three. There are more things, but we will start here. If you like this content, let me know by subbing! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom0:00 Network RTT0:33 TCP Options1:19 Port Numbers
Wireshark Practice - Hands-On Chris Greer 2023-01-05 | Nothing replaces getting practice with Wireshark on your own. Hands-on labs are huge in helping us to build our packet-shredding skillset. In this video we walkthrough the Packet Operations room on TryHackMe. This room is a part of the SOC Analyst 1 path which covers network and packet analysis with a variety of tools including Wireshark. tryhackme.com/room/wiresharkpacketoperationsAlso, for more practice, check out my free Wireshark Filters Room: tryhackme.com/jr/wiresharkfiltersRegister for a free account and let's dig!== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Can AI Create Wireshark FILTERS? // ChatGPT Chris Greer 2022-12-20 | Let's toss some filter questions at ChatGPT and see how it does. In this video I will show how to get a hand with generating some common Wireshark filter expressions using AI. For more practice with Wireshark Filters - check out my TryHackMe room!tryhackme.com/jr/wiresharkfilters// Links and Things //openai.com== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomWant to connect with me? Reach out at my website:packetpioneer.comChapters:0:00 OpenAI ChatGPT Intro0:40 Subnet Filtering2:42 TCP Port Range Filter3:32 Regex Filters5:00 TCP Retransmissions5:40 PCAP Analysis Tips
TryHackMe Walkthrough // Wireshark Basics Room - SOC Analyst 1 Chris Greer 2022-12-15 | In this video we walkthrough the Wireshark Basics room on TryHackMe. This room is a part of the SOC Analyst 1 path which covers network and packet analysis with a variety of tools including Wireshark. TryHackMe Room Link: tryhackme.com/room/wiresharkthebasicsRegister for a free account and let's dig!== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom0:00 Intro and Task 11:27 Task 2 - Tool Overview3:40 Task 3 - Packet Dissection8:08 Task 4 - Packet Navigation16:35 Task 5 - Packet Filtering19:45 Task 6 - Conclusion
Quick Tip - Analyzing Endpoints in Wireshark Chris Greer 2022-12-08 | In Wireshark 4.0, the endpoints dialog on the Statistics menu was reworked. We will look at these changes and how they can help us get an overview of the IP, IPv6, TCP, and UDP conversations in a pcap. This can help to speed our analysis! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Finding Passwords at DEFCON in 45 seconds - ft David Bombal! Chris Greer 2022-12-06 | In this video we talk about the Wall of Sheep at DEFCON and how open usernames and passwords are there for the taking! Make sure if you get to DEFCON to drop by the Packet Hacking Village to do some hunting with Wireshark! For more information, check out David and Chris' Wireshark course on Udemy. bit.ly/udemywireshark#shorts
Analyzing Conversations - Wireshark QUICK TIP! Chris Greer 2022-12-01 | In Wireshark 4.0, the conversations dialog on the Statistics menu was reworked. We will look at these changes and how they can help us get an overview of the IP, IPv6, TCP, and UDP conversations in a pcap. This can help to speed our analysis! == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Explaining the TCP MSS in 40 Seconds ft David Bombal! Chris Greer 2022-11-28 | In this YouTube short, Chris and David quickly explain the purpose of the TCP MSS option. For more information, check out their Wireshark course on Udemy. bit.ly/udemywireshark#shorts
Whats NEW in Wireshark 4.0 // Interview with Gerald Combs - Wireshark Creator Chris Greer 2022-10-12 | In this interview with the creator of Wireshark, Gerald Combs, we learn about the latest update to the world's most popular protocol analyzer. New features, filters, and usage tips straight from the guy who wrote it! //Links and Things//Wireshark 4.0 Release Notes: wireshark.org/update/relnotes/wireshark-4.0.0.htmlReport issues or suggest features:gitlab.com/wireshark/wireshark/-/issuesSharkfest Europe 2022sharkfesteurope.wireshark.org/register== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
BUILD a Packet Capture Appliance for $200! Raspberry Pi Chris Greer 2022-09-23 | In this video we will take a look at how to build a Pi-based appliance for stream-to-disk packet capture for small or home offices. We'll also look at how to get it in-line to capture the packets that matter. == Shopping List ==Rasp Pi - amzn.to/3eIBSSuSD Card - amzn.to/3eReVwzPi Case - amzn.to/3BTE8jfSamsung SSD - amzn.to/3xu3RMtNetgear Switch - amzn.to/3UbSLW7Headless Install of Raspberry Pi: youtu.be/rGygESilg8wWant some Wireshark training? Consider taking one of my courses. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Quick filtering with Wireshark - Drag n DROP! Chris Greer 2022-09-15 | Here is a quick tip on a Wireshark feature that I use all the time. The drag and drop feature allows us to quickly set filters and hone in on the packets that matter.If you liked this video, I’d really appreciate you giving me a like and subscribing, it helps me a whole lot. Also don't be shy, chat it up in the comments!== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
Did TCP just CHANGE??? Chris Greer 2022-09-09 | In August 2022, a new RFC covering the TCP protocol was released. Is this a new version of TCP, or just an update? In this video we look at the new standard and discuss what has changed and why a new RFC was needed. rfc-editor.org/info/rfc9293Want some hands on with TCP? Consider taking one of my courses. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
TryHackMe WIRESHARK Filters Walkthrough Chris Greer 2022-09-06 | In this video we walkthrough the Wireshark Filters room on TryHackMe. We will look at each filter that we need to build in order to answer the questions, and examine some options for each one. TryHackMe Room Link: www.tryhackme.com/jr/wiresharkfiltersRegister for a free account and let's dig!== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom0:00 Intro1:51 Task 2 - Protocol Filters7:01 Task 3 - IP Filters12:10 Task 4 - TCP Filters18:53 Task 5 - DNS Filters25:38 Task 6 - Special Operators30:15 Task 7 - Putting It Together: Filtering for Scans37:02 Filtering For Usernames/Passwords43:17 Conclusion
Learn Wireshark Filters // TryHackMe Room Overview Chris Greer 2022-09-02 | Wireshark filters can be a pain to learn. In this video we introduce the Wireshark Filters room available on TryHackMe! You can access the room here:tryhackme.com/jr/wiresharkfiltersCheck it out, it is free to get an account and go through the room. Get that practice packet people. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom
CHANNEL UPDATE!!! Whats coming up??? Chris Greer 2022-08-30 | Packet People! It's been a busy summer of packet crunching, teaching, and conferences. What content will find its way to the channel and what is in store for the near future? Let's chat. //Links and such//tryhackme.com - register for free!tryhackme.com/jr/wiresharkfilters - check out my Wireshark room.== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomComment below and tell me what you think!
What happens when a client connects? Chris Greer 2022-08-04 | Want more hands-on content like this? Comment below!How does the TLS handshake work? It all starts with the client hello. In this video we are going to dive into what information is sent to a server in this phase of the handshake and the beginnings of how an encrypted connection is set up. ====================Download the pcap here:github.com/packetpioneer/youtube/blob/main/tls-handshake.pcapng====================For a much deeper dive into the TLS handshake and how it works, check out my buddy Ed's Practical ▶TLS course: bit.ly/PN-TLS== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom0:00 Intro to TLS0:27 The Handshake1:04 The Client Hello2:22 Version Negotiation4:40 TLS 1.3 Extensions6:01 Why wrong version?6:34 Server Version7:11 Cipher Suites8:50 Server Name9:40 Application Negotiation
HUNT Malware with TSHARK in 60 Seconds #shorts Chris Greer 2022-07-01 | #short Let's learn a quick tip of how to scan a pcap for suspect HTTP User Agents, which Malware sometimes uses to initiate requests. Link to the pcap: malware-traffic-analysis.net/2020/05/28/index.htmlThe password to unzip the file is "infected"Tshark command:tshark -r example.pcap -T fields -e http.user_agent | sort | uniq -cIn Powershell:tshark -r example.pcap -T fields -e http.user_agent | sort -unique// Contact Me //LinkedIn: linkedin.com/in/cgreerYouTube: youtube.com/c/ChrisGreerTwitter: twitter.com/packetpioneer
How I Passed the Cisco CyberOps Associate Certification // CBROPS 200-201 Chris Greer 2022-06-21 | I passed the Cisco CyberOps Associate exam! So I wanted to pass along the things I did to prep that I didn't even realize would be on the exam. I hope this helps you to pass too! Get the book ---- amzn.to/3OqP0ZLCheck out TryHackMe - Start with my Wireshark Room!tryhackme.com/jr/wiresharkfiltersWant more packet stuff?== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!!0:00 Intro0:53 Scoring1:10 I Stink at Host Analysis1:28 How did I Pass?2:03 The Book3:01 TryHackMe Helped!3:36 Extra Tips to Pass4:45 Final Thoughts
MALWARE Analysis with Wireshark // TRICKBOT Infection Chris Greer 2022-05-05 | Download the pcap here and follow along:malware-traffic-analysis.net/2020/05/28/index.htmlThe password to unzip the file is "infected"If you liked this video, I’d really appreciate you giving me a like and subscribing, it helps me a whole lot. Also don't be shy, chat it up in the comments!Video for configuring GeoIP in Wireshark:youtu.be/IlVppluWTHw// Contact Me //LinkedIn: linkedin.com/in/cgreerYouTube: youtube.com/c/ChrisGreerTwitter: twitter.com/packetpioneer== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!!0:00 Intro0:48 DNS Filters2:00 HTTP Requests/Replies5:00 Using GeoIP5:48 Exporting Usernames and Passwords6:48 Exporting System Info8:50 Extracting Hidden EXE Files11:44 TLS Handshake Signatures
Fix a TCP ZERO Window // TCP Deep Dive with Wireshark Chris Greer 2022-04-29 | What do we do about a TCP Window error in Wireshark? What does it mean and how do we fix it? In this video we will explain how receive windows work and why they go to zero. // Download the pcap here //github.com/packetpioneer/youtube/blob/main/tcp-zerowindow-greer.pcapngGot questions? Let's get in touch.LinkedIn: linkedin.com/in/cgreerYouTube: youtube.com/c/ChrisGreerTwitter: twitter.com/packetpioneer== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!!0:00 Intro0:21 PCAP Overview1:10 What a Zero Window means4:59 How to fix it 6:44 Learn more!
Lets FIX a BROKEN TLS Handshake // with Wireshark Chris Greer 2022-04-13 | A client reached out and said that some clients were able to connect to a secure application and others were not. Let's peek at the handshake and see what happened. (pcap used with permission)Got questions? Let's get in touch.LinkedIn: linkedin.com/in/cgreerYouTube: youtube.com/c/ChrisGreerTwitter: twitter.com/packetpioneer== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom//TLS Course from Practical Networking//Want to go deeper into TLS? Check out my buddy Ed's course:classes.pracnet.net/courses/practical-tls?affiliate=GJoShnLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!!0:00 Intro0:28 TLS Client Hello1:36 Fatal TCP Error2:04 TLS Protocol Versions2:46 Why TLS 1.0? 3:37 Conclusion
How DHCP Works // DHCP EXPLAINED Chris Greer 2022-04-07 | What is DHCP? How does it work? Let's dig into a pcap of a DHCP transaction. If you are in network engineering this is a service you will DEFINITELY troubleshoot at some point. Download the pcap here github.com/packetpioneer/youtube/blob/main/dhcp.pcapngGot questions? Let's get in touch - packetpioneer@gmail.com== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!!0:00 Intro0:19 DHCP Overview0:56 Discover4:39 DHCP Options5:59 Offer7:31 Request8:30 Ack
FIVE COMMON MISTAKES when using Wireshark Chris Greer 2022-03-17 | Packet analysis is hard enough. Avoid these common mistakes that make it even harder. I know... because I have made every single one of them! Comment below with mistakes you have made and how you overcame them - c'mon, be honest! :-)If you liked this video, I’d really appreciate you giving me a like and subscribing, it helps me a whole lot. Also don't be shy, chat it up in the comments!What network tap is in my backpack? Here is one that won't break the bank! amzn.to/3qdCfrn== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomFor professional inquiries please contact me at packetpioneer@gmail.comLinks above contain affiliate links where I will receive a small amount for any goods purchased. I thank you for clicking because it really helps to support me!! Thank you!!
The Top 15 Network Protocols and Ports Explained // FTP, SSH, DNS, DHCP, HTTP, SMTP, TCP/IP Chris Greer 2022-03-01 | If you are learning networking, these are the top protocols and port numbers you will NEED to know. Good for the CCNA, Net+, Sec+, CEH, Pentest+, or that pesky interview you need to ace.Download the pcap here and follow right along:packetpioneer.com/wp-content/uploads/chrisgreer-protocols-and-ports.zip== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomThank you to wiki.wireshark.org/SampleCaptures and Johannes Weber for the pcap samples that I was not able to create on my own! For professional inquiries please contact me at packetpioneer@gmail.com
How OS Fingerprinting Works // NMAP Tutorial Chris Greer 2022-02-16 | In this video we are going to capture these scans with dumpcap and examine how OS Fingerprinting works in Wireshark. It may seem like magic, and it kinda is, but we will take a look at how each crafted TCP/UDP/ICMP packet helps to determine the target OS. //Downloads//Download the Fingerprinting OS PCAPs and NMAP OS Databasepacketpioneer.com/wp-content/uploads/nmap-OS-fingerprint.zipYou can also access the OS database in the /usr/share/nmap folder when installing nmap on a linux system.//Links//NMAP OS Fingerprinting - nmap.org/book/osdetect-methods.html== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroom//Timestamps://0:00 Intro0:45 Running the OS Fingerprinting Scan2:43 Analyzing the scan in Wireshark4:57 How OS Fingerprinting Works8:58 Using the NMAP OS Database10:30 Analyzing ICMP Behavior12:06 ConclusionThis is important info to know for anyone going for their Pentest+, CEH, OSCP, eJPT, CySA+, or just about any other Cybersecurity Cert.
How NULL and XMAS scans work - NMAP Chris Greer 2022-02-10 | In this video we will show how the Null and Xmas scans work, and how you will get different results depending on the operating system. We'll also capture these scans in Wireshark and get a good look at them from the packet level.Let's capture and really learn how NMAP does its thing. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomTimestamps:0:00 Intro0:45 Analyzing the Xmas Scan3:15 Xmas Scan to Windows 105.51 How the Null scan works7:31 Why run a Null/Xmas scan?8:49 Conclusion
Hacking with NMAP - How to Scan a Network Chris Greer 2022-01-31 | In this video we will analyze how the TCP Stealth Scan (-sS) and TCP Connect scan (-sT) work. Let's capture and really learn how NMAP does its thing. == More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomTimestamps:0:00 Intro0:51 Stealth Scan Explained3:10 The Stealth Options4:19 The Full Connect Scan6:36 When to use Stealth vs Connect Scan
How IP FRAGMENTATION Works Chris Greer 2022-01-20 | IP Fragmentation is an important feature to understand, especially many scanning tools use it to try to bypass Intrusion Detection Systems. Knowing how it works and how to spot it is important for all engineers and cybersecurity professionals, especially those going for certifications like the CCNA, Net+, CEH, PenTest+ or any other cyber cert. ====Download the pcap here ====packetpioneer.com/wp-content/uploads/ip_fragmentation_greer.zip== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomTimestamps:0:00 Intro1:06 IP Fragments Explained1:50 Fragmentation Illustrated3:36 Analyzing Oversize Pings8:21 The "Do Not Fragment" Bit10:05 Using Fragmentation with NMAP14:52 IP Fragmentation OvervewHope this helps Packet People! Please like, share, subscribe!Shout out to @NetworkChuck for always drinking coffee on his videos. Gave me the inspiration to put it into this one.
TCP Duplicate Acks Explained // How to Troubleshoot Them Chris Greer 2022-01-12 | In this video we are going to dive into TCP duplicate ACK analysis. In this hands-on video, make sure to download the pcap below so you can follow along.----------Download the pcap here----------- packetpioneer.com/wp-content/uploads/TCP-Retrans-and-Seq-Analysis.pcap_.zip // WIRESHARK TRAINING - Udemy//▶Getting Started with Wireshark - bit.ly/udemywireshark// WIRESHARK TRAINING - Pluralsight//Check out the free 10-day trial of my hands-on courses on Pluralsight: ▶TCP Fundamentals with Wireshark - bit.ly/wiresharktcp ▶Identify Cyber Attacks with Wireshark - bit.ly/wiresharkhunt ▶TCP Deep Dive with Wireshark - bit.ly/virtualwireshark //LIVE TRAINING COURSE//▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwiresharkHope this helps Packet People! Please like, share, subscribe!
Map IP Address Locations with Wireshark (Using GeoIP) Chris Greer 2022-01-04 | Where is an attacker coming from? Using wireshark and GeoIP databases, we can map out IP locations (unless they are spoofed of course) to a browser with a click of a button. How? First - you have to register and download the GeoIP Lite Databases (Free):dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=enThen, point Wireshark to the databases, look up endpoints, then toss them out to a map. Boom! You're done. Like this video? Then show it! Please smash like and share it with all your IT buddies. That really helps me out. Other links n' stuff:== More On-Demand Training from Chris ==▶Getting Started with Wireshark - bit.ly/udemywireshark▶Getting Started with Nmap - bit.ly/udemynmap== Live Wireshark Training ==▶TCP/IP Deep Dive Analysis with Wireshark - bit.ly/virtualwireshark== Private Wireshark Training ==Let's get in touch - packetpioneer.com/product/private-virtual-classroomSpecial thanks to my cat, Pepé for his video-bomb!
