Hands-On Traffic Analysis with Wireshark - Let's practice!

[@tawabullas5058]

We need more content like this

[@wolfleader2]

Thank you, channels like yours make cybersecurity accessible through the lens of a professional, it's not even the answers that matter, it's HOW you get to those answers, and you teach the mindset which is very important, thank you sir

[@ChrisGreer]

Thanks for the comment!

[@axq3837]

The password filled in at ~13:43 for "Client986" is not clientnotthere!, but clientnothere! One character difference yet still accepted as a correct answer for the task. Very forgiving :-) Nice video, though!

[@MFmyk3]

these videos have been helping me along in the soc level 1 thm path. If I could make any comment it would be helpful hearing YOU break down the lesson information instead of skipping to the answer portion of it. I want to understand these protocols, not just- print expression in display filter- copy answer. I have watched your lectures on tcp/ip and other beginer series videos for better understanding, but it feels overwhelming for a newbie.

[@Siamak_Saidi]

Hi @ChrisGreer, I enjoy your videos every time, thanks a lot for your time.

[@thomxs94]

Hi Chris. Just FYI, if you are going to make more THM content in the future, you can expand the VM view on THM in the bottoms left corner. It can really help, since most of the time, we don't really need to look at the questions on the left (with the extra space, maybe you can have your cam on at all time). Other than that, great stuff!

[@ahmetemre1359]

Excellent video by the Chris!!!

[@x0rZ15t]

Love these THM video's of yours! Keep up the great job, Chris! 🙏

[@idrisjibrin62]

Great stuff Chris👍, keep them coming.👏👏👏👏

[@CyberAvenger22]

Thanks for the guidance I definitely got stuck on a few of the questions. Your video was very informative. Thanks again.

[@marco201ful]

17:39 This man, even raps in his educational videos! Keep up the content.

[@willpape1625]

Excellent video by the Master!

[@adalparedes1]

Thank you for taking your time and effort, I really appreciate you share this content. great work 😎

[@zeropanda4806]

I was going crazy about the number of display packets, I was frantically looking to see where!! thanks for pointing it out. although I am unsure how you knew of duplicates, or was it just a guess and then you confirmed it?

[@SnortDefence]

WoW! this is awesome vlog series full of information ...wish could have these pcaps

[@Hartley94]

Thanks Chris

[@slip6699]

this is gold. great info on how case sensitivity matters. It's a bit advance for me but would have been useful to walk through this prior to sec+

[@MG-bm5oj]

Hey Chris.. do you have any video where you explain all the pre-set filters that you have on wireshark? I saw in some of your videos, folders like nmap, server... and can be interesenting to know which one do you use to analize.

[@johnvardy9559]

Hi Chris thanks for the feedback, you think is better to buy your course from Udemy?

[@majiddehbi9186]

Hi Chris. Can u tell u is there any certificat of Wireshark tjhat we can take ? Thx

[@masporfirio78]

That was a great video. Thanks

[@happyroden8826]

best walkthough guy ever

[@Root-uno6nw]

Hey mate, was wondering if you could make a video on using Lua to create a script to focus on data of Interests like only HTTP requests rather then looking at a voluminous PCAP. Can be useful for a particular context.

[@drewmcclellan641]

Great stuff, thanks!

[@cristofmanama5125]

excelent, god protect you. please make more content.

[@calvinnguyen1699]

Hi Chris. How can i use the wireshark check defined IP use----

[@mecyber6316]

i really loved how you teach wireshark , but your picture covering the most important part of the video! hopefully you manage it in future videos, maybe resize it? anyway thank you sir :)

[@ChrisGreer]

Thanks for the feedback - I will def keep that in mind for future videos. It's a balance because I see people drop off when it is just the screen recording. But I can figure that out. Maybe move to the top right during hex analysis.

[@MohammedtayaaCS]

Thank you Chris for this amazing content skills

[@oh123stars]

There are any wireshark certificate? I want to take it, plz tell me. Thank mr

[@Manavetri]

brilliant

[@ChrisGreer]

Thanks!

[@billeck5066]

What is the command you use with tshark to filter the unique user_agent strings out? I'm assuming its something like tshark user-agent.cap | cut "user_agent" | sort | uniq?

[@muhammedakkas-zq8cy]

find user-agent and apply as a column

[@haroldcalderon4514]

Hello Chris... :) If I want to take the official wireshark certification where can I find it.

[@ChrisGreer]

At this point there isn’t a certification offered through the Wireshark Foundation… but stay tuned!!

[@mikelreese5965]

thanks👍👍

[@TheMrDrMs]

How did you get "clientnotthere!" When listed in the pcap was "clientnothere!"?

[@ChrisGreer]

Looks like a minor perception typo error. 😆

[@TheMrDrMs]

@@ChrisGreer haha must be! I thought there might have been some logic to it. But then they have a mistake as they accepted client not there.

[@mbbm-oo4do]

13:26 how did you know there are repated

[@Macj707]

CHEF CRISP WUZ HERE!

[@Mbro-dq2do]

Chris is the shit. Thanks mayne. I still havent had any tcpshow up or http threads. I got to the capture drop down and select it. How do you always have tons of them?? Whats the best filter option to type in? I'm just trying to learn. All I see are just basic neighborhood traffic. Boring shit and nothing special to help me learn. Your videos are th best though

[@ChrisGreer]

Keep on capturing and you'll find some interesting stuff. On some of my other videos I give you a pcap to follow along. keep watching!

[@Mbro-dq2do]

@@ChrisGreer Jesus Christ Chris himself replied.. Appreciate you Mayne. Yeah im in the heart of chicago and just trying to learn everything made my own lab with 3 Macs and a maxed out dell. USB antennas I love Kali and im very impressed with Parrot oS so far. BUT Im just a capable newbie now. not a green newbie who doesn't know anything. I'm getting there. And Im rambling so I'll shut my trap LOL. Thanks homie I'll keep at it Got Wireshark running now on a Dell and Mac with you videos on two other laptops. Im a nerd

[@Mbro-dq2do]

@@ChrisGreer Thanks homie. I love this shit. Broke up with my boring chick cause Id rsther get better at linux while having my dad job as a general contractor. Any questions about building anything fire away! :) I follow you on twitter to get other wireshark and PCAP updates. #nerd

[@techskyrocket4101]

you do need to type. You can copy straight from lab ;)

[@davidmacon1138]

Just my luck but for some reason http contains username refuses to display anything

[@YaserBasaad]

I enjoy all your work but will you please reduce the size of your pic , Thank you

[@ChrisGreer]

I'll make sure to do that next time - thanks.

[@wabisabi84]

This video is mainly to get the answers, not so much to teach you how to find them. I would look elsewhere if you want to learn how to find the answer(s).

[@ChrisGreer]

@@wabisabi84 it’s a tough balance to strike as a creator. Teaching the concepts to find the answers all on your own is the purpose of my channel, so other videos show the overall skill set. I also don’t want this video to be 4 hrs long. It’s an interesting creative/instructive balance. But hey if you create a long-form “how to” of this video I will absolutely recommend it in the description. 😉

[@wabisabi84]

@ChrisGreer I get what you're saying, and I appreciate the little dig at the end. I'm still learning, but I hope to get good enough to make a video that shows different concepts quickly and get your shout-out in a few years. Looking back at your video, your approach makes sense. This was a vid from a year or so, maybe you found some new concepts to share in your future vids.

[@ChrisGreer]

@@wabisabi84 I really do appreciate the feedback so please don't get me wrong! And hey, when I started making videos I was very much starting out as well. I mean it, if you ever make even a simple video give me a shout. I would be happy to support you.

[@wabisabi84]

@@ChrisGreer Thank you, great chat, I look forward to more of your videos.

[@pavi013]

Damn, this was a lot harder to do

[@vz7742]

Not your fault ,THM have poorly explained rooms. They are like heree you have 5 commands you can use and now for practical part,lets use another 15 you are not familiar with.

[@vz7742]

Honestly TryHackMe rooms have often poorly instructions what you need to do,because majority of us on thm are novice and need clear instructions. I hope HTB Academy is better in this regard.