Hummab Rabbia | SOC Analyst

Overview:  In this Coursera Guided Project, I used TCPdump as a sudo user to capture and analyze network packets. I filtered and displayed the first 10 packets with numbering, in hexadecimal, ASCII, and human-readable time formats. I explored all network interfaces, specifically filtering for "ens5." Further, I captured 10 packets from "skyroute66.com" on port 443 and saved the results in numeric, hexadecimal, and human-readable formats to a dump file using the VS Code terminal. This project showcases a systematic approach to packet analysis and effective filtering using TCPdump. TCPdump Introduction: TCPdump is a command-line packet analyzer for Unix-like systems. It captures and displays real-time network traffic, aiding network administrators and security professionals in diagnosing issues. With powerful filtering options, it allows users to inspect packets based on various criteria, offering valuable insights into network communication for troubleshooting and...

Overview:  In this  Guided Project  from  Coursera ,  I delve into the Complexities of packet analysis using the powerful tool, Wireshark, on the Ubuntu platform. The journey is marked by foundational setups, capturing packets, filtering for specific protocols, and ultimately, crafting nuanced filters for smart packet analysis. This documentation recounts my journey, sharing the ups, downs, and lessons from this adventure. Wireshark Introduction: Wireshark is a popular open-source packet analyzer and network protocol analyzer. It allows users to capture and interactively browse the traffic running on a computer network in real-time. Wireshark can capture data from a live network or read data from a file, and it supports a wide range of protocols. It provides detailed information about each captured packet, including header details, payload, and any errors or issues detected. Key Terminologies: Packet: It is a small unit of data that is transmitted over a net...