TShark: CLI Wireshark Features

To access material, start machines and answer questions login.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting the Target Machine, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.

Lab machine

Status:Off

In our first room, TShark: The Basics, we covered the fundamentals of TShark by focusing on how it operates and how to use it to investigate traffic captures. In this room, we will cover advanced features of TShark by focusing on translating Wireshark features to the TShark and investigate events of interest.

To start the , press the green Start Lab Machine button attached to this task. The machine will start in split view. In case it is not showing up, you can press the blue Show Split View button at the top of the page.

The task files for this room are located in the following directory:

~/Desktop/exercise-files

Answer the questions below

Read the task above and start the attached VM.

TShark: CLI Wireshark Features

Task 1IntroductionTask includes a deployable machine

Set up your virtual environment

Task 2Command-Line Wireshark Features I | Statistics IPremium

Task 3Command-Line Wireshark Features II | Statistics IIPremium

Task 4Command-Line Wireshark Features III | Streams, Objects and CredentialsPremium

Task 5Advanced Filtering Options | Contains, Matches and FieldsPremium

Task 6Use Cases | Extract InformationPremium

Task 7ConclusionPremium

Ready to learn Cyber Security?