Course 6: Identify Problems Using Wireshark’s Expert
Wireshark offers an Expert to call your attention to potential problems in your network traffic. In this course, Laura covers the most commonly seen Expert items by focusing on TCP functionality. From the TCP handshake process to the sequence/acknowledgment system and Window Scaling and Selective Acknowledgments, this course is a “must take” for all network analysts and troubleshooters.

Module [mm:ss]
6.1 Examine the Expert in Wireshark’s Source Code [05:50]
6.2 Analyze the TCP Sequencing/Acknowledgment Process [19:59]
6.3 Detect Packet Loss [10:39]
Lab 26 Calculate Multi-Segment Packet Loss [00:00]
6.4 Analyze the Fast Recovery Process [00:00]
Lab 27 Determine What Triggered a Fast Retransmission [00:00]
6.5 Analyze the Standard Retransmission Process [00:00]
Lab 28 Detect Delays Due to Retransmissions [00:00]
6.6 Analyze Spurious Retransmissions [00:00]
Lab 29 Detect Spurious Retransmissions in Traffic [00:00]
6.7 Analyze Out-of-Order Segments LC – see 440 on wwb001-movietime [00:00]
Lab 30 Identify the Cause of Out-of-Order Indications [00:00]
6.8 Analyze Selective Acknowledgements [00:00]
Lab 31 Follow the Selective Acknowledgment Process [00:00]
6.9 Examine TCP’s Sliding Window [00:00]
6.10 Window Scaling Overview [00:00]
Lab 32 Analyze Window Scaling Behavior [00:00]
6.11 Window Size Issue: Receive Buffer Problem [00:00]
Lab 33 Identify Delays Due to Receive Buffer Issues [00:00]
6.12 Window Size Issue: Unequal Window Sizes [00:00]
Lab 34 Detect Issues in Multi-Point Captures [00:00]
6.13 Reviewing All TCP Expert Items [00:00]

Course Resources: TR-course6files.zip
 challenge101-0.pcapng
 general101.pcapng Y
 http-download-bad.pcapng
 http-google101.pcapng
 http-winpcap101.cap
 mybackground101.pcapng

CPEs: 4