Completed Case Study
Network Traffic Analysis with Wireshark
PCAP analysis exercises covering DNS, HTTP, ICMP, TCP conversations, user-agent review, TLS metadata, and peer-to-peer traffic investigation.
DNS β’ HTTP β’ ICMP β’ User-Agent Review
Objective
Improve packet analysis skills by using Wireshark filters and protocol views to answer evidence-based investigation questions.
Work performed
Reviewed DNS queries, HTTP methods and response codes, ICMP packet timing, User-Agent strings, TLS client hello metadata, file download clues, and torrent-related traffic.
Skills demonstrated
Wireshark filtering, protocol analysis, DNS/HTTP/TCP fundamentals, traffic correlation, artifact validation, and evidence-based answering.
Outcome
Improved confidence with packet-level validation rather than guessing from single packets or incomplete fields.