TShark: CLI Wireshark Features

To access material, start machines and answer questions login.

In our first room, TShark: The Basics, we covered the fundamentals of TShark by focusing on how it operates and how to use it to investigate traffic captures. In this room, we will cover advanced features of TShark by focusing on translating Wireshark features to the TShark and investigate events of interest.

To start the , press the green Start Machine button attached to this task. The machine will start in split view. In case it is not showing up, you can press the blue Show Split View button at the top of the page.

The task files for this room are located in the following directory:

~/Desktop/exercise-files

Answer the questions below

Read the task above and start the attached VM.

Ready to learn Cyber Security?

The TShark: CLI Wireshark Features room is only available for premium users. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.

Already have an account? Log in

TShark: CLI Wireshark Features

Task 1IntroductionTask includes a deployable machine

Task 2Command-Line Wireshark Features I | Statistics IPremium

Task 3Command-Line Wireshark Features II | Statistics IIPremium

Task 4Command-Line Wireshark Features III | Streams, Objects and CredentialsPremium

Task 5Advanced Filtering Options | Contains, Matches and FieldsPremium

Task 6Use Cases | Extract InformationPremium

Task 7ConclusionPremium

Ready to learn Cyber Security?