Wireshark: Packet Loss and Recovery

1h 23mIntermediate2019-04-12

Authors

Lisa Bock

Security ambassador with a broad range of IT skills and knowledge

Course details

Learn how to use Wireshark, the powerful protocol analysis tool, to deal with packet loss and recovery, so you can keep traffic moving. Instructor Lisa Bock begins by reviewing normal traffic, comparing TCP, a connection-oriented protocol, with UDP, a lightweight connectionless protocol. She then moves into discussing network latency, packet loss, and throughput; TCP and UDP packet loss recovery; misconfiguration issues that can cause an interruption of end user experience, along with malware; and more.

Learning objectives
TCP and flow control
Differences between TCP and UDP
Dealing with packet loss and delay
Explicit Congestion Notification (ECN)
TCP packet loss recovery
Fast retransmission and recovery
UDP packet loss recovery
Bursts and packet loss

Skills covered

WiresharkNetwork SecurityNetwork AdministrationCybersecurityNetwork and System AdministrationOpen SourceDeep Dive (X:Y)

Concepts

0. Introduction

01 - Understand packet loss and recovery
02 - What you need to know

1. Understanding Normal Traffic

03 - TCP state diagram
04 - TCP and Flow Control
05 - TCP Flow Control demo
06 - User Datagram Protocol
07 - Compare TCP and UDP

2. Latency, Packet Loss and Throughput

08 - Latency, packet loss, and throughput
09 - Packet loss and delay - TCP vs. UDP
10 - Bufferbloat
11 - Explicit Congestion Notification (ECN)
12 - Keep-Alive

3. TCP Packet Loss Recovery

13 - Network congestion
14 - Congestion avoidance
15 - Selective acknowledgment
16 - Slow start
17 - Fast retransmission and recovery

4. UDP Packet Loss Recovery

18 - UDP - Real-time protocols
19 - UDP - Quality of service
20 - UDP - Bursts and packet loss
21 - Malware and misconfiguration

Conclusion

22 - What's next