19 - How I Learned to Stop Worrying and Love the PCAP | Learn Wireshark

The title of this class is: "How I Learned to Stop Worrying and Love the PCAP" and was taught by Kary Rogers. This was recorded on September 17th online.
sharkfestus.wireshark.org
Subscribe to our channel for tons of free Wireshark educational content. To attend a live SharkFest and to learn Wireshark with packet analysis experts, visit: sharkfest.wireshark.org.
SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.
SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.
SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both."

[@peppigue]

for screen recordings/streams, presenters should consider whether they have appropriate zoom tools and legibly sized text. if not, they should lower the resolution as much as possible without compromising layout and functionality. if you are an organizer of presenters, prompt them for a ten minute talk before to sort out stuff like this.

[@VinayakKamble-gf6le]

Hi Kary, Thanks you so much for information, I have learned a lot from this. I have query about TTL Value. I have captured packet at source machine and in SYN packets i observed changing TTL value from 1-3 and sometimes 64 since it is Linux. can you please help to understand why TTL 1 is used here by source machine instead of 64 since no any routing is happening and packets captured from source itself. Hope to here soon

[@WireSharkFest]

Hey Vinayak, I don't think Kary monitors these comments - he has some links to contact him on his website: packetbomb.com/

[@RishiRap]

I can't believe that Kary did not zoom into pkt. capture screen and all it was a BLUR starting from 26:13 approx. and onwards. Nothing was visible on screen. Just some dots and unreadable words showing up on screen. Such a unpleasant experience.