Skip to main content

​
Overview

Days 43-56 focus on traffic analysis, a critical skill for understanding network behavior, detecting threats, and investigating security incidents. You’ll learn to capture, analyze, and interpret network packets using industry-standard tools.

​
Learning Objectives

By the end of this section, you’ll be able to:
  • Capture and analyze network traffic with Wireshark
  • Use TCPdump for command-line packet analysis
  • Configure and deploy Suricata as an IDS/IPS
  • Identify suspicious network patterns and anomalies
  • Perform protocol analysis and troubleshooting

​
Tools Covered

​
Wireshark

Wireshark is the world’s leading network protocol analyzer. It allows you to see what’s happening on your network at a microscopic level and is the de facto standard across many industries and educational institutions.Key Features:
  • Deep inspection of hundreds of protocols
  • Live capture and offline analysis
  • Rich VoIP analysis
  • Powerful display filters
  • Cross-platform support
Learning Resources:Video Tutorial:

​
Resource Hub

Wireshark University

Official training courses and certification programs

Wireshark Tutorial

Comprehensive beginner-friendly written guide

TCPdump Study Guide

Command-line packet analysis reference

Suricata Documentation

IDS/IPS deployment and configuration guide

​
Video Tutorials

Wireshark for Beginners

Complete video series covering Wireshark basics to advanced topics

Suricata IDS/IPS Tutorial

Learn to deploy and configure Suricata for network monitoring

​
Study Plan (Days 43-56)

1

Wireshark Fundamentals (Days 43-47)

  • Complete Wireshark University course
  • Follow the guru99 tutorial
  • Practice capturing and filtering packets
  • Watch the beginner video series
2

TCPdump Mastery (Days 48-51)

  • Read through the TCPdump tutorial
  • Practice command-line packet capture
  • Learn filtering syntax and expressions
  • Compare captures with Wireshark
3

Suricata IDS/IPS (Days 52-56)

  • Study the Suricata documentation
  • Watch the IDS/IPS tutorial video
  • Set up Suricata in a test environment
  • Configure rules and test detection
Pro Tip: Practice analyzing real network traffic by capturing your own network activity. Start with simple protocols like HTTP and DNS before moving to more complex ones like TLS and SSH.

​
Next Steps

After mastering traffic analysis, you’ll move on to Git Version Control to learn essential development and collaboration skills used in security teams.

Build docs developers (and LLMs) love

Get started for freeTalk to us