This was very cool, which begs the question: where does one start on the road of becoming a LanWanNinja? 🤔 ;
@LanWanNinja8 күн бұрын
Thank you! Well, I would say it is more of a journey than a destination, but the start of the journey is learning networking. I think by learning Wireshark for instance, more than anything we are learning all about networks and network protocols.
@sarundayo7 күн бұрын
@LanWanNinja What I meant to ask was, how did you get to the point where you are now? Care to recommend a few books/video series perhaps?
@LanWanNinja7 күн бұрын
That is a very good question. My path is from years of experience and lots of learning, but that doesn't mean that it has to take that long. Definitely always keep learning, learn something every day, even if it is just for 5 minutes, no zero days. Getting certifications helps with basic ideas and concepts, but they do not give you depth. For someone that already works in IT, I would say to always ask questions about technologies that you do not know, but someone else does, always be curious. I really do think that learning Wireshark is a huge help, and almost a shortcut, to learning networking. It helped me because I could see the packets and their contents, instead of just learning concepts. I have seen so many times over the years that people, myself included, are guessing what is going on over a network in a certain situation and then we take a packet capture and what is really happening is something totally different. As far as videos or books go, I'm not sure that I can think of any right offhand. I wish I could say to watch all of my videos, it's everything that I know. I'm working on getting there, but I'm not there YET. Maybe start with a good Udemy class for CCNA or Network +? The next video I'm working on now between the Wireshark videos is an "Intro to Networking" video, which will be pretty basic, but put some of the concepts like ARP, DNS, and MAC addresses into visual terms. I hope this reply helps some.
@androiddoctor489712 күн бұрын
How can we add the Time and Time Delta column?
@LanWanNinja12 күн бұрын
Go to Edit and then Preferences, expand appearance and columns or just right click on any column and click column preferences and you will end up in the same place. Time should be there by default, you may have to click the displayed checkbox if it is not. For time delta, click the plus sign at the bottom of the Preferences window to create a new column, and it will add New Column to the bottom under title. Change new column title to Time Delta, or whatever you want to call it. Change Type to "time (format as specified)", change Fields to "frame.time_delta_displayed". Make sure "displayed" is checked for the new column you created, and then click OK. It will add the column to the far right side and you may have to grab and move it to where you want. If for some reason, time is not there, use the plus sign to add another column: title: time Type: time (format as specified) and leave fields blank. The time delta above will show the time since last displayed frame, if you ever want to change to time since last captured frame, you can use "frame.time_delta" For an easier way, look at my Wireshark class 2 - columns and coloring rules, starting at 1:20, adding columns from packet details, lots of good stuff in that video. kzbin.info/www/bejne/nmG7m6uGbLiXpsk
@Celebatar18 күн бұрын
Great content Van! I really appreciate the way you clearly show the filters you are using and the explanations. I'd be all for seeing more on the graphs.
@LanWanNinja18 күн бұрын
Thanks! That's one vote for I/O graphs then. There really is a LOT that the I/O graphs are good for.
@GoogleAIccount118 күн бұрын
right into the topic, no bullshit, nice.
@LanWanNinja18 күн бұрын
Thanks. Yeah, I do not like any kind of filler either.
@junpinox157418 күн бұрын
The production on this channel has SKYROCKETED! Always great content! I always feel much more confident in wireshark after every video!
@LanWanNinja18 күн бұрын
Thanks, I appreciate it! I try to make each video a bit better.
@MISTYEYED.Ай бұрын
😂
@LanWanNinja14 күн бұрын
🤔
@bajakanukolanuАй бұрын
Thank you wan for these series of videos. It was really helpful.
@LanWanNinjaАй бұрын
Thank you. I'm really glad you liked them. There are more on the way soon!!
@JonMurrayАй бұрын
Thanks a lot man, really great video. I’m just starting to learn about networks so while I didn’t know all of the terminology or acronyms I’m becoming more familiar with how they work and you made this really easy to follow along with and visualise in my head. New subscriber ✌🏻
@LanWanNinjaАй бұрын
Thanks for watching and for the feedback. That is a great reminder for me to make sure that I define any acronyms and terms I use. Thank you! If there are any videos you would like to see made, just leave me a comment.
@JonMurrayАй бұрын
@@LanWanNinja no worries at all! That was more a comment on my knowledge level and memory hahah! I don’t want to jump straight into trying to use things like wireshark when I don’t have more of the fundamental skills and knowledge down but it’s great to see how it works and get familiar with it. Thanks that’s great, I will do!
@wabisabi842 ай бұрын
Being new to Wireshark this was broken down neatly. I would need to watch this video 2 more times to memorize some of steps taken. Thank you!
@LanWanNinja2 ай бұрын
Thanks for watching and I'm glad you liked it. The next video, that I am working on now will take the same basic signs and a few new methods and apply them to finding nmap scans within a larger packet capture. My goal is to make it clear enough so that it can be understood even by people just getting started. Thanks again!
@wabisabi842 ай бұрын
@@LanWanNinja That's a lot of work, we appreciate you much!
@LanWanNinja2 ай бұрын
Thank you!
@Progressive_Entrepreneur2 ай бұрын
For responder, what keyword would I search to see this activity ?
@LanWanNinja2 ай бұрын
Excellent question! If you mean in a packet capture, I would use these filters individually instead of a keyword. Filter: nbns Purpose: See all of the NetBIOS Name Service (nbns) packets, the queries and the responses. Filter: nbns.flags.response == true Purpose: Show only the NetBIOS Name Service (nbns) packets responses. If responder is running on a computer, the source address or addresses that show up when you use this filter, are the computer that is running responder. Filter: nbns.flags.response == false Purpose: This will show all the queries, these are your machines that are using NBNS to resolve names. It is a good security practice to turn this off on PCs unless there is some strange reason that you need PCs to broadcast when they cannot resolve a name through DNS. I think that there is a possibility that this could pick up other packets also, but I am not seeing any others in the pcaps I am looking at now. Let me know if this answered your question. If it did not, I'll be more than happy to answer again.
@RatStikerz2 ай бұрын
I'm a beginner in networking and these videos are so helpful, they're very digestible and let's me know what to look for when I do simulations in school
@LanWanNinja2 ай бұрын
Thanks, I'm glad they are helping. That's great to hear, it's exactly what I am going for. I really try to make them digestible for beginners and also have good tips and content in there for people who have been doing it for a while too.
@bulcub2 ай бұрын
those robots are the future of humans on a desk!!!!
@LanWanNinja2 ай бұрын
It sure seems like it! LOL
@Celebatar2 ай бұрын
Good stuff Van!
@LanWanNinja2 ай бұрын
Thanks! I'm glad you enjoyed it!!
@Celebatar2 ай бұрын
Hey Van, this is Charles. I've listened to a number of your videos and you've done a great job! I look forward to listening to the rest of them.
@LanWanNinja2 ай бұрын
Hey Charles thank you!! I'm glad you liked them!!
@HindiKahani9313 ай бұрын
How to anylize live connect person ip with wireshark
@LanWanNinja3 ай бұрын
Thanks for watching! Is this a question or a suggestion for another video?
@michelantoniovio9343 ай бұрын
Very helpfull videos...I'm already following you in your channel and website..Thanks!
@LanWanNinja3 ай бұрын
Thanks so much! Soon I hope to add some more links to the website and also start a blog section. I have a lot of daily "tips and tricks" that are not quite enough for a video, but I think would be helpful. Let me know if there are any videos that you would like to see. Thanks again!! The website is www.lanwan.ninja in case anyone else wants to take a look.
@rsleepy2553 ай бұрын
Really hope your channel gets big because i am looking forward for your future videos!
@LanWanNinja3 ай бұрын
Thanks! And I am hoping the same thing!!
@newcolux7424 ай бұрын
Amazing, I did find some flags by having a god given power for patterns. However our amazing professor actually gave us your 'little hunt' as a fun homework. I absolutely loved doing this!! I learned a significant amount tonight :D I will recommend you for haven.
@LanWanNinja4 ай бұрын
Wow, that's awesome! Thank you. And please tell your professor thanks. You may want to take a look at some of my other Wireshark videos too.
@newcolux7423 ай бұрын
@@LanWanNinja Absolutely! :)
@d1m184 ай бұрын
Thank you. Can't wait for the next video
@LanWanNinja4 ай бұрын
Thanks!! Next one coming soon!
@carsonjamesiv25124 ай бұрын
GOOD STUFF!😃👍❗️😎
@LanWanNinja4 ай бұрын
Thanks much for watching. More videos are on the way!
@nachonacho97854 ай бұрын
Insightful video thanks 🙏🏽
@LanWanNinja4 ай бұрын
Thanks for watching! And stay tuned, the deep dives and more to come soon.
@privateness.network4 ай бұрын
very well done!
@LanWanNinja4 ай бұрын
Thank you. And thanks for watching!
@zadekeys21944 ай бұрын
Everything is just a pattern. Being able to identify the pattern is critical, be that with the naked eye or tooling.
@LanWanNinja4 ай бұрын
Yep, I totally agree. And thanks for watching!
@wisteela4 ай бұрын
Great video. Subscribed.
@LanWanNinja4 ай бұрын
Thanks! I'm really glad you liked it.
@joepa39124 ай бұрын
This is great! I look forward to your future posts! :)
@LanWanNinja4 ай бұрын
Thank you!!
@traggums4 ай бұрын
Just found your channel, great info and editing - Subscribed! Lookin forward to more content :)
@LanWanNinja4 ай бұрын
Thanks!! More content is definitely in progress now.
@comosaycomosah4 ай бұрын
man this was goood! glad i found your channel
@LanWanNinja4 ай бұрын
Thanks! I'm glad you found my channel too. Stay tuned for the deep dives in this series. Thanks for watching!
@comosaycomosah4 ай бұрын
@@LanWanNinja for sure! Def will check it out man
@sagittarius_sq44 ай бұрын
This is a great Wireshark tutorial video he gets straight to the point no "BS" INFORMATION NOR DOSE HE WASTE YOUR TIME WITH BAD INFORMATION! I'm just going to add that you add a section or new video on the "ANALYZE SECTION" is very important to understand! Display filters and Display Filters Macros and everything else listed under Analyze !
@LanWanNinja4 ай бұрын
Thanks, I really appreciate it. I completely agree about the "Analyze" section and we will get there in the deep dives. We are gonna need Display Filter Buttons and Display Filter Macros to really make finding this kind of thing easier. Thanks again!
@sagittarius_sq44 ай бұрын
@@LanWanNinja Thank you Sir , like they say two great minds always thinks alike. Keep the videos coming!
@LanWanNinja4 ай бұрын
Thanks :) ! And don't worry, I will!!
@RatStikerz4 ай бұрын
this is so well produced and informative, glad i subscribed 😮💨
@LanWanNinja4 ай бұрын
Thanks so much!! I'm glad you subscribed too!
@Montanafide4 ай бұрын
WOO!! so nice I had to watch it twice! ;)
@LanWanNinja4 ай бұрын
Thanks, I'm glad you really liked it!
@The_Coffee_Loving_Engineer_HND4 ай бұрын
This is a good video. I'll definitely be inspecting my network later. I haven't had a chance to watch all of your other videos, but if you haven't covered it yet you may want to do a video on network segmentation and VLAN. I don't want to mention anything specific about my network, but as my network grows, I'm trying to segment my network so if one section falls the other sections can survive.
@LanWanNinja4 ай бұрын
Thanks! glad you liked it. I think segmentation and VLAN would be a great video to do after I do the deep dives for this video too.
@The_Coffee_Loving_Engineer_HND4 ай бұрын
@@LanWanNinja Yeah, I've been meaning to watch more of your videos. It's been on the back burner for months. I'm not a network engineer, but working at small to mid-sized companies means I get called upon to be the IT guy at times. Usually when something goes catastrophically wrong. So naturally I want to take steps to minimize that. OH! And it's fun!
@LanWanNinja4 ай бұрын
I hear ya on the "Usually when something goes catastrophically wrong" part. That seems pretty normal. I have fun with it too. I realized today while working on something, that I was just guessing what was going on until I took a packet capture. I found out that it was something TOTALLY different.
@robguitar74 ай бұрын
Wow! Very informative. I've seen a bunch of vides but not as detailed and easy to understand as yours. I will be referencing these from here on out. Thanks for videos!
@LanWanNinja4 ай бұрын
Thanks so much! I appreciate it!
@rudypieplenbosch67525 ай бұрын
Wow that is some analyses you do there. I will use wireshark as well, having sime weird issues with Pfsense, one virtualized and a normal pfsense, they both work great separately, only the virtualized one, doesn't let me write things to my server, or it writes something but very slow. Reading goes blisteringly fast a very weird issue, i can ping everything fine, in both cases the same vlans are used, anyway i will find it with wireshark.
@LanWanNinja5 ай бұрын
Thanks!! Yeah, I can't tell you how many times I have looked at an issue and thought one thing and then the packets said something else. That sounds like that kind of issue.
@null8225 ай бұрын
awesome
@LanWanNinja5 ай бұрын
Thanks!!!
@Finito54ify6 ай бұрын
Very informative and well structured video! Good explanations on how to use wireshark - tinkered around a bit, but never got, what I was looking for I went from 68 certs to 490 :D
@LanWanNinja6 ай бұрын
Thank you!! And great to hear on the cert numbers!
@stevekayak6 ай бұрын
Nice tutorial. Thats a handy command to update the root certs. My certs went from 52 to 485 !
@LanWanNinja6 ай бұрын
That's great to hear! And thanks.
@arwinweeraman82306 ай бұрын
Thanks indeed! You're gifted. You can explain things in a simple way that the audience can grasp easily.
The way your explaining in a detail way it's a awesome dude 💯
@LanWanNinja6 ай бұрын
Thank you so much 😀
@judahluciano46556 ай бұрын
Love your videos very easy to follow and learn. hope you have tutorial how to install source mac address manufacturers. Thanks.
@LanWanNinja6 ай бұрын
Thanks! And I may do that.
@netlover10396 ай бұрын
upload all video.
@LanWanNinja6 ай бұрын
I'm already working on the next one!
@safetime1006 ай бұрын
Thx ❤
@LanWanNinja6 ай бұрын
You're welcome 😊
@stevekayak6 ай бұрын
Did this today and enjoyed it. Nice and easy and looking forward to some more little teasers. also enjoyed the Easter Egg at the end - Well done for creating these and thanks!
@LanWanNinja6 ай бұрын
Thanks! There will be more, I had fun creating it.
@Chain-tc8pb6 ай бұрын
This is clear and concise, thank you. Could you possibly do a video on how to find anomalies? Like possible indicators of compromise. I'm a security engineer and want to be more efficient with Wireshark.
@Chain-tc8pb6 ай бұрын
For context, I was handed a pcap and was asked to find all of the anomalies. But the thing is, lol when you don't know Wireshark everything looks anomalous. I subscribed and I'll stay tuned for the next video!
@LanWanNinja6 ай бұрын
I think this is a great idea!! I'm working on the next video already, but I think that this may be the one after that. I think if we were just finding individual IOCs, an IDS/IPS would be way more efficient. BUT I think that finding anomalous behavior would be something we could do very well, and I think that is going to make a great video, and I've already been brainstorming on this one, after I saw your comment. Thanks for the kind words.
@LanWanNinja5 ай бұрын
I am working on this video you requested now. I just started it on Wed 3/12/24, the day after I published my latest video. Thanks so much for your request!! It is going to take a bit to finish, but it is going to be REALLY GOOD!!
@Chain-tc8pb5 ай бұрын
@@LanWanNinja Thank you!
@LanWanNinja4 ай бұрын
I finally finished it. :) kzbin.info/www/bejne/aZOZpXiVm7ublZo
@MrNaxreo6 ай бұрын
i'm waiting like this class. thank you so much
@LanWanNinja6 ай бұрын
Thank you!! The next video is in progress already. If you have not seen this one from last week yet, it is good too: kzbin.info/www/bejne/qJa5XmltptV9gpY
@HuyNguyendotme6 ай бұрын
The video was well structured and I love how you go through the examples/scenarios, will be checking out your other videos to learn more soon. Keep up the good work.
@LanWanNinja6 ай бұрын
Thanks! I appreciate it. More to come soon too!!
@channelsixtyfour85276 ай бұрын
Thanks for that little hunt. It was relatively easy, but thats because, and this is for me, may be different for others, but the thought was around 8 characters. I presume putting in the filters was the test here. As a learning exercise it was fun, looking forwards to some other CTF's as you progress. The easter egg at the end was a nice touch. Keep going!
@LanWanNinja6 ай бұрын
I'm glad you liked it. My plan is to slowly make them more difficult, I have some ideas that I have been kicking around for the next one
@RatStikerz6 ай бұрын
I just got started in networking and these are super helpful!
@LanWanNinja6 ай бұрын
Thanks!! There will be more to come. And even some of my other videos may be helpful.
@garthenar6 ай бұрын
Cool. I'm just getting really into all this stuff so this is really good timing from the algorithm.
@LanWanNinja6 ай бұрын
Thanks! Glad to help!! My pcap analysis #1 video is similar to this one, it digs into a pcap, with other issues. The other ones start out more basic and explain filtering, coloring rules, etc. There is even one on installing Wireshark. More to come soon too.
@joerockhead72467 ай бұрын
very nice. looking forward to part two. the buzzer noise is a bit loud, though. thank you.
@LanWanNinja7 ай бұрын
Thanks Joe. I'll lower the buzzer volume for future videos, wow, it does kinda jump out at you!