An Introduction to Traffic Analysis - A Pragmatic Approach
via YouTube
Build the Finance Skills That Lead to Promotions, Not Just Certificates
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
Syllabus
Intro
Why do we capture packets?
Obtaining Network Traffic
Network Interface Cards
FreeBSD Packet Processing
FreeBSD Processing cont.
mbuf kernel structure
Linux Frame Processing
sk_buff kernel structure
Keeping Up?
Capture Mechanisms/Sockets
tcpdump tests, average
libpcap buffer
FreeBSD, packet drops netstat
Linux, packet drops ifconfig
tcpdump/libpcap drops
Reporting & Stats
graphing with gnuplot
Packets Per Second
Gigabit Line Rate for UDP
trafgen config files
BPF Filters - 3
Capture SYN
IP Options: RR Example
Capture HTTP GET Method
netsniff-ng: a quick look
netsniff-ng: writing to disk
netsniff-ng: Creating filters
tcpdump & libpcap
Analysis