01 - Network Troubleshooting from Scratch | Learn Wireshark @ SF22US

The title of this class is: "Network Troubleshooting from Scratch" and was taught by Jasper Bongertz. This was recorded on July 12th in Kansas City, MO.
sharkfestus.wireshark.org
Subscribe to our channel for tons of free Wireshark educational content. To attend a live SharkFest and to learn Wireshark with packet analysis experts, visit: sharkfest.wireshark.org and sharkfesteurope.wireshark.org.
SharkFest™, launched in 2008, is a series of annual educational conferences staged in various parts of the globe and focused on sharing knowledge, experience and best practices among the Wireshark® developer and user communities.
SharkFest attendees hone their skills in the art of packet analysis by attending lecture and lab-based sessions delivered by the most seasoned experts in the industry. Wireshark core code contributors also gather during the conference days to enrich and evolve the tool to maintain its relevance in ensuring the productivity of modern networks.
SharkFest’s aim is to support ongoing Wireshark development, to educate and inspire current and future generations of computer science and IT professionals responsible for managing, troubleshooting, diagnosing and securing legacy and modern networks, and to encourage widespread use of the free analysis tool. Per Gerald Combs, Wireshark project Founder …“Wireshark is a tool and a community. My job is to support both."
/ wiresharkfest
Chapters:
0:00 Intro
1:56 Principles of Troubleshooting
7:12 Troubleshooting Goals
10:28 Establishing Connection State
19:00 Time to live/Hop Count
30:46 Real World Scenario 1: "Evil Firewall"
56:45 Scenario 1 Conclusion
58:33 Connection Breakdown
1:01:01 Real World Scenario 2: "We have a problem"
1:08:22 Q&A

Пікірлер: 71

  • @DawnDouglass
    @DawnDouglass6 күн бұрын

    Well done. Clear and concise.

  • @saurabh9m
    @saurabh9m4 ай бұрын

    One of the best video on basic network troubleshooting. Thanks for sharing for free 🙏🙏🙏

  • @WireSharkFest

    @WireSharkFest

    4 ай бұрын

    Thanks for watching!

  • @toptalkers7980
    @toptalkers7980 Жыл бұрын

    What a fantastic session, I learned a lot of new stuff. Thanks for sharing with us.

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Glad you enjoyed, stay tuned for more!

  • @harrysearia1784
    @harrysearia178411 ай бұрын

    Thank you, this was easy for me to follow and understand.

  • @AstorSolutions
    @AstorSolutions9 ай бұрын

    Pure gold.

  • @iSirLincoln
    @iSirLincoln Жыл бұрын

    Did not see the session in person but it wound up on my recommended. Great video and very informative.

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Thanks for tuning in, we'll be doing more live classes in 2023!

  • @nealpan
    @nealpan10 ай бұрын

    Love it. Thanks for sharing

  • @chess-is-life
    @chess-is-life6 ай бұрын

    Excellent session! Thank you so much Jasper!

  • @WireSharkFest

    @WireSharkFest

    6 ай бұрын

    Thanks for tuning in!

  • @ramprasad8385
    @ramprasad8385 Жыл бұрын

    Very Informative Session

  • @parishaymakers
    @parishaymakers11 ай бұрын

    Awesome video! It got me interested in wireshark, thank you!

  • @WireSharkFest

    @WireSharkFest

    9 ай бұрын

    Glad to hear it!

  • @gilbertosampa8140
    @gilbertosampa8140 Жыл бұрын

    Good job, thanks!

  • @LogicArray
    @LogicArray5 ай бұрын

    Many thanks for such consolidated one

  • @staramod
    @staramod Жыл бұрын

    I feel like hearing Arnold Schwarzenegger :-)

  • @RashadPrince

    @RashadPrince

    Жыл бұрын

    😅

  • @jasperbongertz4866

    @jasperbongertz4866

    9 ай бұрын

    I'll be back! :)

  • @ChapalPuteh_

    @ChapalPuteh_

    9 ай бұрын

    Yep, the Terminator are trying to troubleshoot tge Skynet Server network ..

  • @Bruce.-Wayne

    @Bruce.-Wayne

    8 ай бұрын

    Caame wiff me if you wanna live

  • @agritech802
    @agritech8027 ай бұрын

    Great video, thanks for sharing 👍👍

  • @shaboog2644
    @shaboog2644 Жыл бұрын

    Great content, hope to hear more from him.

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    There will definitely be more!

  • @codydietrich4246
    @codydietrich42462 ай бұрын

    Thank you sir!

  • @basketcase-po6iw
    @basketcase-po6iw3 ай бұрын

    Thank you

  • @mersenne2486
    @mersenne24867 ай бұрын

    awesome

  • @train4905
    @train490510 ай бұрын

    Awsome sir

  • @pyro_the_dude
    @pyro_the_dude Жыл бұрын

    Nice thanks

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    You're welcome!

  • @roseamos7359
    @roseamos7359 Жыл бұрын

    very good video

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Thanks Rose!

  • @ThePumbaadk
    @ThePumbaadk Жыл бұрын

    This was great, thanks

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Thanks for watching!!

  • @ThePumbaadk

    @ThePumbaadk

    Жыл бұрын

    More real scenarios would be nice

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    @@ThePumbaadk there are a bunch more scenarios in our past videos if you want to check them out!

  • @krishanpal-ex6qs
    @krishanpal-ex6qs Жыл бұрын

    Nice Explanantion

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Thanks for watching Krishan!

  • @hh3224
    @hh32244 ай бұрын

    Firewalls, load balancers, and other network equipment can reduce TTL without being actual hops in the path. Traceroute will do a better job counting

  • @radhakrishna2501
    @radhakrishna2501 Жыл бұрын

    useful session. can we expect another session from Jasper regarding Throughput issues :)

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Jasper will definitely have more sessions at upcoming 2023 SharkFests! We'll let him know that throughput issues were requested.

  • @JanezGaming

    @JanezGaming

    Жыл бұрын

    @@WireSharkFest Hi Did jasper uploaded this throughput issues?

  • @jasperbongertz4866

    @jasperbongertz4866

    9 ай бұрын

    @@JanezGamingNo, I haven't presented that kind of talk yet. But I'll keep it in mind ;)

  • @user-zu4ft8yw9e
    @user-zu4ft8yw9e2 ай бұрын

    To effectively troubleshoot network issues using Wireshark during the SF22US conference, you should start by understanding your network layout and capturing traffic with a broad scope. Apply filters to narrow down to specific issues and capture traffic at strategic points. Familiarize yourself with key protocols like TCP, HTTP, and DNS. This process will help you analyze network traffic, identify problems, and troubleshoot effectively.

  • @gilbertosampa8140
    @gilbertosampa8140 Жыл бұрын

    I would like to know if it is possible to connect an Ethernet cable to my access point and in my notebook and configure Wireshark to see all the wireless traffic generated on the access point. It is possible to configure Wireshark to see wireless traffic on the Access Point over the ethernet cable. Thanks a lot for the help!

  • @WireSharkFest

    @WireSharkFest

    11 ай бұрын

    Thanks for the question Gilberto - feel free to ask it on our Discord as it will be easier to answer there! discord.com/invite/ts9GZCjGj5

  • @tonyruiz2046
    @tonyruiz20464 ай бұрын

    ⭐️👍⭐️

  • @azndragon75
    @azndragon75 Жыл бұрын

    How do you set up a live capture 4G / 5G call processor with Wireshark? I know how to capture pcap trace file, but that can only be done from the EPC or 5G Core.

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    I don't think Jasper monitors the comments here - feel free to ask him on the Wireshark Discord server! discord.com/invite/ts9GZCjGj5

  • @azndragon75

    @azndragon75

    Жыл бұрын

    @@WireSharkFest Thank you much!

  • @saifemran4528
    @saifemran4528 Жыл бұрын

    I like your coloring columns, is there any chance you can share it?

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Feel free to join our Discord and ask Jasper there! discord.com/invite/ts9GZCjGj5

  • @saifemran4528

    @saifemran4528

    Жыл бұрын

    @@WireSharkFest Joined, thank you!

  • @josephkilonzo5994
    @josephkilonzo59947 ай бұрын

    Hello Sir, how are you arriving at that no.of routers. For example, when i ping my gateway router, i 'm getting a TTL of 113. How do i calculate the no.of hops(routers)?

  • @WireSharkFest

    @WireSharkFest

    7 ай бұрын

    Thanks for the question, Joseph! It's much easier to get a reply on our Discord server: discord.com/invite/ts9GZCjGj5

  • @ChapalPuteh_
    @ChapalPuteh_3 ай бұрын

    So the dissallowed ip range, on that subnet, no IP address were allowed .... /24 tell everything .. Unless you whitelisting the client IP address .. am i right ? Lets say i want to make a whitelisting option, we should dissallowed by /24, and allow just 1 IP (must be static), from the client .. And the topology is Internal Network for the VM's ... right ? and Wireshark is good for digging network artifact, but overall your video is clearly understandable ... thank you sir ..

  • @WireSharkFest

    @WireSharkFest

    3 ай бұрын

    Thanks for the question! Feel free to ask on our Discord server, it's more likely to get a response there: discord.com/invite/ts9GZCjGj5

  • @haybolrambol5001
    @haybolrambol50014 ай бұрын

    What could be the reason if I am getting this error "TCP ACked Unseen Segment" in my wireshark analysis? thanks

  • @WireSharkFest

    @WireSharkFest

    4 ай бұрын

    Thanks for the question! Feel free to ask on our Discord server, it's more likely to get a response there: discord.com/invite/ts9GZCjGj5

  • @MCroppered
    @MCroppered Жыл бұрын

    Please say "I'll be back" at the end of your videos

  • @jasperbongertz4866

    @jasperbongertz4866

    9 ай бұрын

    Next time I might :)

  • @tahersadeghi6773
    @tahersadeghi67739 ай бұрын

    In the case of Google's TTL of 112, How do you find out the number of hops? What formula do you use to find the number of hops?

  • @WireSharkFest

    @WireSharkFest

    9 ай бұрын

    Feel free to ask this question in the Wireshark Discord server, it's much more likely to get a response there! discord.com/invite/ts9GZCjGj5

  • @jasperbongertz4866

    @jasperbongertz4866

    9 ай бұрын

    I look at the "Usual Suspects" of starting TTLs: 64, 128, 255. 64 is too low, so we can rule that one out. 255 is unlikely because that would mean we'd have 43 hops and it's rare to see any hop count above 23, and more so above 35. So we can assume 128 is the starting TTL, which would mean its 16 hops (128 minus 112) , which is very reasonable.

  • @mwiza

    @mwiza

    8 ай бұрын

    It started at 128 and drops by 1 for every hop. Therefore 128 - 112 gives you 16 (hops)

  • @gilbertosampa8140
    @gilbertosampa8140 Жыл бұрын

    How about 802.11 Troubleshooting.

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    Not exactly what you're looking for, but we do have this video on 802.11 Power Save Mode kzread.info/dash/bejne/e3p916WBgaW1lqg.html

  • @netlogis
    @netlogis Жыл бұрын

    Voice over by Magnus Carlsen

  • @WireSharkFest

    @WireSharkFest

    Жыл бұрын

    In this economy, even a chess grandmaster has to have a side gig

  • @hillierpallen1473
    @hillierpallen1473 Жыл бұрын

    Thank you for this video. I shared it with a few friends. They were so excited.. You are missing out on potential viewers by not using a service such as *promo sm*!!!

Келесі