• Home

  • Documents

  • Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012)...
36
SHARKFEST ‘12 | UC Berkeley | June 24–27, 2012 Using Wireshark with the CloudShark Plugin Monday June 25 th 2012 Joe McEachern CEO and Founder | CloudShark Zach Chadwick Lead Developer | CloudShark SHARKFEST ‘12 UC Berkeley June 2427, 2012 Wireshark Developer and User Conference WARNING: This presentation may be interactive! Start packet surfing right from your seat! @cloudshark https://surf.cloudshark.org User: sharkfest Password: sharkfest

Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Using  Wireshark  with  the  CloudShark  Plug-­‐in  Monday  June  25th  2012                          Joe  McEachern                          CEO  and  Founder  |  CloudShark                          Zach  Chadwick                          Lead  Developer  |  CloudShark      SHARKFEST  ‘12  UC  Berkeley  June  24-­‐27,  2012  

Wireshark Developer and User Conference

WARNING: This presentation may be interactive! Start packet surfing right from your seat!

@cloudshark

https://surf.cloudshark.org User: sharkfest Password: sharkfest

Page 2: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act One: The Evolution of CloudShark “We’re going to need a bigger boat!” -- Jaws, 1975

Page 3: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

In  the  Beginning  …  

It all started at QA Cafe in Portsmouth, New Hampshire, USA …

… We develop CDRouter for testing CPE devices (aka gateways, routers, edge devices).

… Our test software has probably been used to test the router in your home.

… Lots of packets, lots of Wireshark

Page 4: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act  One:  The  CloudShark  Story  

2010   2011   2012  

•  QA Cafe developed technology to view packets in the web

The CloudShark TimeLine

•  We called it “inline packet decode” Sexy!

•  We wanted to make this capability available to a wider audience

•  Launched free CloudShark.org

•  “Pushing packets to the cloud is a dumb idea!”

•  Okay, here is the CloudShark appliance. Deploy it in your own network!

•  What about security in the cloud?

•  Still using Wireshark to create captures.

•  Let’s make it easier to send your capture files from Wireshark to CloudShark

•  Released a GPL Wireshark plug-in that makes it easier to send captures to CloudShark

Page 5: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Two: Quick Tour of CloudShark “You got any better suggestions” -- Jaws, 1975

Page 6: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

•  How  things  were  done  B.C.  

•  “Before  CloudShark”  

Page 7: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

•  “Hey  can  you  look  at  something?”  

•  SVcky  Fingers  

•  BLT  not  TCP  

•  SneakerNet  

Page 8: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

hYps://www.cloudshark.org/captures/f62e1db77ba0  

Page 9: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  Store

•  View

•  Analyze

•  Annotate

•  Share

Why  CloudShark?  

Page 10: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

Page 11: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  Centralized storage

Why  CloudShark?  

Page 12: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

•  Now where did I put that…?

•  Indexes the metadata

•  Searching

Page 13: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Quick  Demo  

Start packet surfing right from your seat!

@cloudshark

https://surf.cloudshark.org User: sharkfest Password: sharkfest

Page 14: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Why  CloudShark?  

•  How do we make this even easier?

•  It’s plugin time!

Page 15: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Three: Getting Started with the Plugin “That’s some bad hat Harry” -- Jaws, 1975

Page 16: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Wireshark  Plug-­‐in  

•  The plug-in uses Wireshark’s Lua plug-in interface.

•  Once installed, the Tools menu is extended with a new CloudShark option.

•  Use the Upload option to push the current capture file to CloudShark.

•  Wireshark opens the default browser with a CloudShark session URL.

View from Web

Page 17: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  Download  free  installer  from  cloudshark.org.  Latest  version  is  1.0.1.  

•  Installers  available  for  Windows,  OSX,  and  generic  unix  (*.tgz).  

•  Installed  under  user’s  Wireshark  plugins  directory  (plaeorm  specific).  

•  Simply  restart  Wireshark  and  plug-­‐in  is  detected  automaVcally.  

InstallaVon  

Page 18: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  Text  based  configuraVon  available  from  CloudShark  menu  

•  Configure  CloudShark  URL  to  CloudShark.org  or  your  own  appliance  

•  Setup  API  key,  user,  password  

•  Setup  addiVonal  tags  •  CerVficate  configuraVon  for  

curl  

ConfiguraVon  

Page 19: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Wireshark  Plug-­‐in  

•  Works with live capture or stopped/loaded capture.

•  Upload sends capture to CloudShark web API using https POST.

•  Plug-in checks response and determines CloudShark session URL.

View from Web

Page 20: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Live Plug-in Examples

@cloudshark

https://surf.cloudshark.org User: sharkfest Password: sharkfest

Start surfing now. Sample captures will be uploaded to surf.cloudshark.org.

Page 21: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Four: Using the Plug-in with tshark “This was no boat accident” -- Jaws, 1975

Page 22: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  User  interface  challenge  •  Off  by  default  •  Can  enable  automaVc  

uploads  or  prompVng  through  Cloudshark  preferences  file  

•  Great  for  scripVng  and  automaVon  tools  

•  CloudShark  session  URL  displayed  in  tshark  output  

Using  the  Plug-­‐In  with  tshark  

Page 23: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Live Tshark Examples

@cloudshark

https://surf.cloudshark.org User: sharkfest Password: sharkfest

Here come some more waves. Grab your board and head to surf.cloudshark.org.

Page 24: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Five: Setting up for the Plug-in “Come on into the water.” -- Jaws, 1975

Page 25: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Sejng  up  for  the  Plugin  

d02fd17392176a29e98ac7d40ef17c59 1.  Create Token

2.  Settings

3.  Copy/Paste

Page 26: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Six: A quick look under the hood This shark, swallow you whole. -- Jaws, 1975

Page 27: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

•  Lua  provides  cross  plaeorm  support  

•  How  do  you  get  Wireshark  to  speak  web?  Use  combinaVon  of  Curl  and  Lua  JSON  library.  

•  Not  many  Wireshark  GUI  controls  available  through  Lua  –  but  enough!  

•  Support  tshark  by  detecVng  GUI.  

•  Go  deeper  in  Wednesday’s  Sharkfest  session.  

A  Look  Under  the  Hood  

Page 28: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Seven: Lessons Learned What we have here is a eating machine. -- Jaws, 1975

Page 29: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Uploads  

•  No signups

•  No logins

•  No limit to imagination

of uploads!

Page 30: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Uploads  

•  MP3

•  MPEG

•  JPEG

•  Historical reasons for support?

Page 31: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Uploads  

•  Exploits

•  Denial Of Serivce

•  Sandbox

Page 32: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Mobile  

•  “Out of the office”

*standard data and messaging rates may apply

Page 33: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Data  Size  

•  Bandwidth issues

•  Too much data

•  Information without all the data

•  Caching

Page 34: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Lessons  Learned:  Community  

•  Great community

•  PacketLife.org

•  ask.wireshark.org

•  SharkFest!

Page 35: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Act Eight: Wrapping up Any special questions? -- Jaws, 1975

Page 36: Wireshark Developer and User Conference...SHARKFEST)‘12))|))UC)Berkeley))|))June)24–27,)2012) ActOne:’The’CloudShark’Story’ 2010 2011 2012 • QA Cafe developed technology

SHARKFEST  ‘12    |    UC  Berkeley    |    June  24–27,  2012  

Wrapping  up  

•  Learn  to  packet  surf  today!  Download  the  plugin  now  from  cloudshark.org  

•  Login  to  hYps://surf.cloudshark.org     user:sharkfest password:sharkfest

•  Try  out  our  capture  challenge  for  Sharkfest  aYendees!                  hYp://bit.ly/sharkfest-­‐2012  

•  Come  back  for  Wednesday’s  11:00  session            “Using  Lua  to  implement  the  Wireshark  Plug-­‐in”  

Have a great Sharkfest!


SharkFest ’18 ASIA · 2018-04-13 · 1 SharkFest ’18 ASIA SSL/TLS Decryption uncovering secrets Wednesday April 11th, 2018 Peter Wu Wireshark Core Developer peter@lekensteyn.nl

SharkFest ’18 ASIA · 2018-04-13 · 1 SharkFest ’18 ASIA SSL/TLS Decryption uncovering secrets Wednesday April 11th, 2018 Peter Wu Wireshark Core Developer [email protected]

Documents
Root Cause In Complex Networks - sharkfest'15 ppt · Baseline test: ARP? • Identified with Wireshark on Win2012 • 2x 10Gbps NICs across 2 switches (paired) • Security software,

Root Cause In Complex Networks - sharkfest'15 ppt · Baseline test: ARP? • Identified with Wireshark on Win2012 • 2x 10Gbps NICs across 2 switches (paired) • Security software,

Documents
ntop Extcap: Where Wireshark Meets DPI and HW-Based BPF · Sharkfest EU 2017 • Estoril, Portugal • November 7th - 10th, 2017 Title Text ntop Extcap: Where Wireshark Meets DPI

ntop Extcap: Where Wireshark Meets DPI and HW-Based BPF · Sharkfest EU 2017 • Estoril, Portugal • November 7th - 10th, 2017 Title Text ntop Extcap: Where Wireshark Meets DPI

Documents
ActOne Solutions, Inc. - guam.shrm.org

ActOne Solutions, Inc. - guam.shrm.org

Documents
Network Baselining with Wireshark · Network Baselining with Wireshark Jon Ford Penetration Tester | MainNerve Llc. SharkFest'17 US • Carnegie Mellon University • June 19-22,

Network Baselining with Wireshark · Network Baselining with Wireshark Jon Ford Penetration Tester | MainNerve Llc. SharkFest'17 US • Carnegie Mellon University • June 19-22,

Documents
SharkFest '17 Europe - Wireshark · PDF fileSharkFest '17 Europe ... • Includes Wireshark & Lua scripts ... CSMA/CA offers different Inter Frame Spaces (IFS)

SharkFest '17 Europe - Wireshark · PDF fileSharkFest '17 Europe ... • Includes Wireshark & Lua scripts ... CSMA/CA offers different Inter Frame Spaces (IFS)

Documents
MAMMAMIA!STUDYGUIDE - …€¢. 2 ACTONE ThestoryopensonthebeachofabeautifulGreekisland.Sophie,ayoung,

MAMMAMIA!STUDYGUIDE - …€¢. 2 ACTONE ThestoryopensonthebeachofabeautifulGreekisland.Sophie,ayoung,

Documents
T2-10: Trace File Analysis Samples of Wireshark in - Sharkfest

T2-10: Trace File Analysis Samples of Wireshark in - Sharkfest

Documents
SHARKFEST '08 | Foothill College | March 31 - April 2, 2008 T1-1: I’ve downloaded Wireshark… Now what? Monday, March 31, 2008 – 10:30am – 12:00pm Betty

SHARKFEST '08 | Foothill College | March 31 - April 2, 2008 T1-1: I’ve downloaded Wireshark… Now what? Monday, March 31, 2008 – 10:30am – 12:00pm Betty

Documents
SharkFest ’17 Europe - Wireshark · SharkFest ’17 Europe ... •Web: Capture while using browser’s Developer Tools. ... • Note: If Wireshark is doing DNS name resolution during

SharkFest ’17 Europe - Wireshark · SharkFest ’17 Europe ... •Web: Capture while using browser’s Developer Tools. ... • Note: If Wireshark is doing DNS name resolution during

Documents
Visualizing 802.11 Wireshark Data...SHARKFEST ‘12 | UC Berkeley | June 24–27, 2012 Visualizing 802.11 Wireshark Data Tuesday, July 26th, 2012 Ryan Woodings Chief Geek | MetaGeekSHARKFEST

Visualizing 802.11 Wireshark Data...SHARKFEST ‘12 | UC Berkeley | June 24–27, 2012 Visualizing 802.11 Wireshark Data Tuesday, July 26th, 2012 Ryan Woodings Chief Geek | MetaGeekSHARKFEST

Documents
SharkFest ’19 US...1 SharkFest ’19 US Debugging TLS issues with Wireshark Tuesday June 11th, 2019 Peter Wu Wireshark Core Developer peter@lekensteyn.nl #sf19us UC Berkeley June

SharkFest ’19 US...1 SharkFest ’19 US Debugging TLS issues with Wireshark Tuesday June 11th, 2019 Peter Wu Wireshark Core Developer [email protected] #sf19us UC Berkeley June

Documents
SHARKFEST ‘10 | Stanford University | June 14–17, 2010 The Shark Distributed Monitoring System: Distributing Wireshark Deep Packet Analysis to LAN/WAN

SHARKFEST ‘10 | Stanford University | June 14–17, 2010 The Shark Distributed Monitoring System: Distributing Wireshark Deep Packet Analysis to LAN/WAN

Documents
Pre-Conference Troubleshooting Class - Wireshark · Pre-Conference Troubleshooting Class SharkFest’17 Europe Agenda Instructor Bios Session Abstracts & Requirements SharkFest’17

Pre-Conference Troubleshooting Class - Wireshark · Pre-Conference Troubleshooting Class SharkFest’17 Europe Agenda Instructor Bios Session Abstracts & Requirements SharkFest’17

Documents
WiFi Intrustion Detection from WireShark SharkFest

WiFi Intrustion Detection from WireShark SharkFest

Healthcare
SharkFest 11 Using Wireshark to support the application · • Wireshark helps us ‘Prove’ where / what the ... 2011 About ProjectWise • ProjectWise is a Client / Server application

SharkFest 11 Using Wireshark to support the application · • Wireshark helps us ‘Prove’ where / what the ... 2011 About ProjectWise • ProjectWise is a Client / Server application

Documents
SHARKFEST ‘10 | Stanford University | June 14–17, 2010 To the Terabyte and Beyond! Leveraging Pilot and Wireshark to Analyze Truly Massive Packet Traces

SHARKFEST ‘10 | Stanford University | June 14–17, 2010 To the Terabyte and Beyond! Leveraging Pilot and Wireshark to Analyze Truly Massive Packet Traces

Documents
Wireshark Certified Network Analyst Boot Camp Course - Sharkfest

Wireshark Certified Network Analyst Boot Camp Course - Sharkfest

Documents
802.11 Secrets Revealed - Sharkfest - Wireshark

802.11 Secrets Revealed - Sharkfest - Wireshark

Documents
SCTP/SIGTRAN & SS7 Overview - Sharkfest - Wireshark

SCTP/SIGTRAN & SS7 Overview - Sharkfest - Wireshark

Documents
SharkFest ’17 Europe - Wireshark › assets › presentations17eu › 1… · Wireshark TraceWrangler Has a Gazillion of protocol dissectors 34 protocols parsed as of Sharkfest

SharkFest ’17 Europe - Wireshark › assets › presentations17eu › 1… · Wireshark TraceWrangler Has a Gazillion of protocol dissectors 34 protocols parsed as of Sharkfest

Documents
SHARKFEST '09 | Stanford University | June 15–18, 2009 SSL Troubleshooting with Wireshark and Tshark Sake Blok R&D Engineer @ ion-ip

SHARKFEST '09 | Stanford University | June 15–18, 2009 SSL Troubleshooting with Wireshark and Tshark Sake Blok R&D Engineer @ ion-ip

Documents
Application Performance Analysis using Wireshark - Sharkfest

Application Performance Analysis using Wireshark - Sharkfest

Documents
How 802.11ac Will Hide Problems from Wireshark - Sharkfest

How 802.11ac Will Hide Problems from Wireshark - Sharkfest

Documents
DT-6 (Bj¸rlykke) Lua Scripting in Wireshark - Sharkfest

DT-6 (Bj¸rlykke) Lua Scripting in Wireshark - Sharkfest

Documents
Wireshark!Dissectors!–Advanced! · 2017-12-08 · !!SHARKFEST!‘10!!|!!Stanford!University!!|!!June!14–17,!2010! Wireshark!Dissectors!–Advanced! June17,2010 GeraldCombs Lead%Developer%%|%%Wireshark%

Wireshark!Dissectors!–Advanced! · 2017-12-08 · !!SHARKFEST!‘10!!|!!Stanford!University!!|!!June!14–17,!2010! Wireshark!Dissectors!–Advanced! June17,2010 GeraldCombs Lead%Developer%%|%%Wireshark%

Documents
SharkFest ’18 Europe SharkFest ’19 Europe · SharkFest ’18 Europe #sf18eu • Imperial Riding School Renaissance Vienna • Oct 29 - Nov 2 Layer 1 & 2 Analysis Using Wireshark,

SharkFest ’18 Europe SharkFest ’19 Europe · SharkFest ’18 Europe #sf18eu • Imperial Riding School Renaissance Vienna • Oct 29 - Nov 2 Layer 1 & 2 Analysis Using Wireshark,

Documents
Wireshark Developer and User Conference Developer and User Conference. SHARKFEST) ... • PowerShell#“drives”#are#only#usable#from# PowerShell#cmdlets#and#funcJons.##Use#'ConvertE

Wireshark Developer and User Conference Developer and User Conference. SHARKFEST) ... • PowerShell#“drives”#are#only#usable#from# PowerShell#cmdlets#and#funcJons.##Use#'ConvertE

Documents
NST Wirshark SharkFest 2017 - Wireshark · SharkFest'17 US • Carnegie Mellon University • June 19-22, 2017 Presentation Agenda •Using Wireshark with NST (Network Security Toolkit)

NST Wirshark SharkFest 2017 - Wireshark · SharkFest'17 US • Carnegie Mellon University • June 19-22, 2017 Presentation Agenda •Using Wireshark with NST (Network Security Toolkit)

Documents
SharkFest ’18 Europe...SharkFest ’18 Europe #sf18eu • Imperial Riding School Renaissance Vienna • Oct 29 - Nov 2 Layer 1 & 2 Analysis Using Wireshark, Wi-Spy & Other Tools

SharkFest ’18 Europe...SharkFest ’18 Europe #sf18eu • Imperial Riding School Renaissance Vienna • Oct 29 - Nov 2 Layer 1 & 2 Analysis Using Wireshark, Wi-Spy & Other Tools

Documents