In part three of this four-part lab, you will learn a process and methodology for examining packets from a network connection. You will also practice the reconstruction of sessions and streams from packet data. The methods used to extract data from an encrypted SSL or TLS connection will be explored, as well as what a normal vs abnormal TCP packet looks like.
Prerequisites
You should have already completed Protocol Analysis I and Protocol Analysis II
You should have some familiarity with the Unix command line, as well as some basic networking concepts.
Expected Duration
0.5 hours, self-paced. Pause and continue at any time.
0.5 CPEs awarded on successful completion.