TryHackMe WIRESHARK Filters Walkthrough

[@_JohnHammond]

YEEEEEAAAAAAAAAAHHHHHHHH

[@adamn777]

What about Mr. Hammond? Will we be seeing a THM room by you soon?

[@igielv]

Supergood!!! Congratulation Chris and thanks for amazing course. I was struggling jut a lil bit to get through Task 6 (Special Operators) - with match / contains filters seems like regex doesn't work properly (at least on macOS). - "quotes" has to be used, otherwise syntax is red - incorrect (I know you have them in text, they're just missing from video). - "\." is evaluated also as syntax incorrect on macOS - seems like backslash should be omitted and filter works just fine (I know that it's in contrary with regex use, may be a Wireshark bug on macOS, or just a little inconsistency?) Many thanx again and have great day everyone.

[@majiddehbi9186]

woow so clairly explained chris you are the magicien of the packets thx and God bless u for all what u are given

[@ChrisGreer]

You are very welcome

[@dwaynesudduth1028]

I just finished this earlier (started this morning then had some things to do and came back to it). two words: LOVED IT. Specifically: I loved how you put in questions that were not explicitly covered in the reading material attached to each task. Instead, some questions made you go out and figure out what you were specifically wanting for an answer. Awesome job!!

[@ChrisGreer]

Nice job Dwayne! Glad you liked the wireshark room. Thanks for the comment.

[@dwaynesudduth1028]

@@ChrisGreer Indeed---learned a few new tricks for my 'bag'. Thanks again for all the effort you put out for us!

[@yoshi8171]

Great contents! This one still doesn't show up in the search result in THM, though the other Wireshark related rooms do. It's a pity many people cannot find this in search, thus cannot reach out. Huge thanks to Chris from Tokyo 🙏

[@dandele123]

Your videos are phenomenal!

[@adamn777]

Love the extra insight given on this video. Love it.

[@ChrisGreer]

Glad you enjoyed it!

[@mahfoudtoubalseghir3673]

awesome room! just completed it and the reason I could do so is thanks to your course on Udemy. It helped a lot!

[@135qwerthi]

Oh boy! Cant wait to get my hands on this one!!! Thanks for this Chris

[@ChrisGreer]

Report back and let us know what you think!

[@immny]

Cool Chris I love it and i took your course on Udemy

[@ChrisGreer]

Nice!

[@MikeBramm]

Thanks Chris. I always pick up a few new tricks from watching your videos.

[@ChrisGreer]

Thanks for the comment!

[@romansovetskikh7902]

Slash in front of dot didn't work in my wireshark. Correct filter appears for me just without slash in this expression.

[@scottt2481]

Excellent as always Chris. Very entertaining compared to the standard THM room. The video contains more insights than the THM room provides. Highly recommend watching the video and don't skip through the answers working from the wording in the room.

[@faran_siddiqui-d3t]

The room was amazing as hell 🔥🔥🔥🔥

[@ChrisGreer]

Thanks Faran!

[@jjames7206]

It is Great ! Chris, I got the feeling when I working on it. Thanks bro

[@themonkeysteeze]

need more of these wire shark walkthrough's!

[@ChrisGreer]

More on the way! There is a long Wireshark room on THM that I am shooting now.

[@ozzman530]

Great video. I saved the Site for a rainy day. When I came back to it I noticed some things would not work as described in the walkthrough. Might be due to two newer versions of wireshark having came out since this video was released.

[@ChrisGreer]

You are spot on! The newer versions have different filter syntax and I need to fix the room. My fault here… sorry guys been busy!

[@kekeke7815]

Thankyou for actually explaining tNice tutorialngs. Other videos that I watched started talking about how to make soft and didn't ntion anytNice tutorialng

[@MrBitviper]

I completed it the same day you posted about that on youtube it was great. please create more if you can

[@ulvihmdli688]

Hi is this room only for premium members?

[@MrBitviper]

@@ulvihmdli688 if I remember correctly this room is free. check out the link with your login and you should be able to access

[@admar-nelson]

I was waiting for this task. thank you so much to provide insight. you are Wireshark Star

[@ChrisGreer]

Happy to help!

[@admar-nelson]

@@ChrisGreer ✌

[@hcetc]

Thanks a lot Chris. I am trying to get into the room, but I am unable to. It says the room is private. Kindly guide me.

[@Onethingtosay]

It says that room ist privat

[@andrewrx88]

Thanks for the update!

[@raymation3d]

Good stuff Chris!!!

[@ChrisGreer]

Appreciate it!

[@admar-nelson]

Mr. I know you don't like to make long videos so I suggest you split them into parts and it would also help you to upload them to the youtube platform faster

[@flinfaraday1821]

Good stuff. Thanks. (maybe trim spaces from answers)

[@ChrisGreer]

Good idea

[@NoNoandNo-no]

underrated room

[@heavydieselengine8989]

ok, am I crazy or what. I put in the IP.addr in with the curly braces and it was not working and only worked if i removed the comma between the IP address?

[@ChrisGreer]

You aren’t crazy… Wireshark 4.0 now requires “”. So I need to fix that in the room…

[@heavydieselengine8989]

@@ChrisGreer thanks for the info

[@ballathiam9486]

Awesome! thank you!

[@ChrisGreer]

You're welcome!

[@Onethingtosay]

I cant find the room..

[@ChrisGreer]

Is the link working? TryHackMe.com/jr/wiresharkfilters

[@Onethingtosay]

@@ChrisGreer Yes, now its working. But the link from description not, at least for me

[@ChrisGreer]

@@Onethingtosay Ok thanks for the heads up!

[@admar-nelson]

In the THM Platform has also some others Wireshark and others PCAP rooms. please put it in your plan too. for now I deep Thanks for provide solution for this room. I made only 72%. now I'll finich it of course 😊😉

[@ChrisGreer]

Great idea - planning to do more rooms like this.

[@admar-nelson]

@@ChrisGreer we'll waiting Mr.

[@buf0rd]

Thank you

[@dandtech]

Great room! But I'm not getting any tryhackme points from your room!

[@ChrisGreer]

Yeah I don’t think they give points until they make it public, which is on their release schedule. I’ve asked how long it will take but no answer. Been waiting 6 months ☹️

[@dandtech]

@@ChrisGreer Waw... 6 months! That's brutal... :-(

[@ChrisGreer]

@@dandtech Yeah I know! I got kinda tired of waiting that's why I just released this video. Hope that the traffic to it will trigger their attention!

[@falcon__4316]

good one

[@ChrisGreer]

Thank you! Cheers!

[@Rogerson112]

Love u thanks for all ❤️

[@Harsh-bl3wq]

I am an idiot. For Task 6 i was using task 5 pcap instead of task 3 pcap. 😅. I did not read the Instructions.

[@ChrisGreer]

Sorry I could have made that a little easier on my end too....

[@net_setup]

hello...I noticed that on my version of wireshark (4.0.3) I had to use: frame matches ".com|.org" on task 6 question 3 to get the 28 packets. I tried removing the "." in the search also and it worked too. don't know if that will help anyone.

[@ChrisGreer]

Thanks for mentioning that! On the VM on THM they are using an earlier version so the no-quotes works. But not on 4.0 and newer. Thanks for spotting that.