🦈🦈 TShark Tutorial: Solving the TShark Challenge II Directory - TryHackMe 🦈🦈

[@djalilayed]

Please subscribe to get the latest videos www.youtube.com/@djalilayed

[@nairobi6999]

Thank you for your videos 🎉

[@djalilayed]

Glad you like them!

[@nairobi6999]

Please do the snort challenge

[@yassoares112]

@djalilayed can you please do a video of the tshark: cli Wireshark features. Specifically I am trying to complete task 4 with the credentials and I can't figure out how to do it . I found the correct answer, but I can't figure out the correct code to demonstrate the answer as an output I can understand. Thanks . Your videos are always good and helpful

[@djalilayed]

Hi, I will try to make video soon, to task 4 credentials question: tshark -r credentials.pcap -z credentials -q | nl (nl here numbers of lines) but this command will also show you the header which from output is 3 lines, also there is 1 last line (===) that should not be counted, so 3 top and 1 at the bottom You can update full command to: tshark -r credentials.pcap -z credentials -q | tail -n +4 | head -n -1 | nl which will give you the all the credential found, You can just also use this: tshark -r credentials.pcap -z credentials -q | tail -n +4 | head -n -1 | wc -l

[@yassoares112]

@@djalilayed thanks the script you provided it did the trick! For me it was kinda counter intuitive that tail chops of the start or "head" of the output. I was thinking it was most logical to cut off the head something like: head -n -3 | tail -n -1 for this command. Still learning how to use the head and tail commands. Thanks for your videos. From what i found on the web your videos are the most consistently thorough for thm. No rush, i see you put out content ever day, but when you get a chance could you do the 3 snort rooms in the SOC level 1 path? I dont typically not figure out how to do it, but for some reason these snort rooms are tripping me up. Thanks again.

[@djalilayed]

Thanks, will do

[@alkan1807]

thank you for your videos but PLS CHANGE YOUR MICROFONE. maybe it is better when u buy something with pop filter...

[@djalilayed]

Thanks.That is what I have now, I will see in the future to get better one.