Tcpdump - Introduction

Jon Schipp introduces tcpdump, the standard packet sniffer for Unix systems. The course covers three-quarters of tcpdump's options through hands-on demos, teaching you to debug network traffic and read output for IP, UDP, TCP, and DNS protocols.
Chapters
In this video module, we'll discuss tcpdump. We will familiarize ourselves with its aspects and features. Tcpdump is the most ubiquitous command-line packet sniffer or protocol analyzer available for the Unix or Unix-like set of operating systems. We're actually going to cover a lot of things in this video module. This can be one of the largest modules dedicated to a single tool because of how important tcpdump actually is. Given this, we won't be able to cover everything. It's a large tool with a large number of options and features, but we will actually cover most of it. And I'm very happy to say that probably 3/4 of tcpdump we'll be able to cover in this video module. But not only that, we'll actually give you the skills to know how to debug and look for answers with tcpdump. All of this will be done live. You'll see before and after for different features and output. So you'll get a sense of how, or an intuitive sense on how to future, or in the future, how you can actually approach tcpdump when you have to come across a problem. We'll also be doing, besides the basic and advanced usage and a number of more detailed stuff like socket permissions, etc., you'll actually learn how to use a number of tcpdump extensions available on different operating systems such as OS X and OpenBSD. This is really cool. This stuff is not really covered a whole lot elsewhere. Also, one thing we'll be actually talking about is we'll be doing a protocol review with tcpdump. So you'll be able to get a, a sense of how, when you actually have to analyze a particular protocol or a packet, how you can do that with tcpdump to make sense of its output. Cuz every tool has its own set, its own output, its own output structure, and its own way to identify pieces or portions of the packet. And in this video, we'll actually get you to hone in on a few, uh, common protocols such as IP, UDP, TCP, and DNS to actually familiarize yourself how to investigate those with this particular tool. Well, that about covers the intro. I hope you guys have a really good time and enjoy this. Do send us feedback. Thank you. Goodbye.
More from Jon

What No One Knows the Podcast / Vodcast featuring The Tampa Bay Wave and Jon Schipp

Meeting the Exposure Management Challenge: Key Use Cases for Success | @OfficialRapid7 #SolutionSpotlight

Spot Security Control Gaps and Non-Compliant Resources Across Your Attack Surface







