Jasper

Head of Incident Response @gdata_adan. Creator of TraceWrangler. Member of the Board of Directors of the #Wireshark Foundation. My thoughts are my own.

[Jasper @PacketJay]

Starting a series of tips & tricks for #Wireshark in anticipation of #CLUS and #SF19US. So here we go:

Wireshark May 2019 Tip #01:
you can use the F7/F8 function keys to scroll through the packet list even if the focus is in the decode or packet bytes pane. #wiresharktips #dfir

[Jasper @PacketJay]

@awakecoding Have you considered presenting this kind of talk at Sharkfest? Looks like an interesting topic 😉

[Marc-André Moreau @awakecoding]

If you missed the webinar, here is the video recording for "Decrypting RDP Traffic in Wireshark"! The slides are great, but the one-hour presentation is even better: https://t.co/k5rP1aQKVW

[Girard Kavelines @GKavelines]

Follow along using #XFD12 for this phenominal presention from @Digicert on Digital Trust & demos! https://t.co/lG8JT2qdKJ🔥💻#TH570 #CiscoChampions #AQCrew #XFD12

[Tech Field Day | Cisco Live US @TechFieldDay]

Tune in for the Live Delegate Roundtable at Security Field Day 12 to kick of the event! @TechFieldDay #XFD12 https://t.co/YhYuURqZSL

[WireSharkFest @wiresharkfest]

Check out more agenda highlights from the upcoming #sf24eu #Wireshark Dev & User conference:

- Beyond Network Latency: Chasing it up the Stack(Josh Clark)
- Kerberos Deep Dive(Eddi Blenkers)
- Passive Fingerprinting Methods for #IoT Profiling(Asaf Fried)

https://t.co/YINrz4I98I

[Jasper @PacketJay]

@danieldibswe @Peter_Paluch some professional FPGA based capture devices allow capturing the FCS in cases where that's needed to troubleshoot physical errors. Standard NICs don't, even though there were COTS PCMCIA cards that could when used with a special driver in Sniffer Pro

[WireSharkFest @wiresharkfest]

Don’t miss your chance to join the industry's best @ SharkFest'24 EUROPE—register to get a spot at the ultimate #Wireshark event. Level up your network analysis skills w/ expert-led sessions & hands-on labs that will transform your approach to networking!

https://t.co/YINrz4IGYg

[WireSharkFest @wiresharkfest]

More agenda highlights from the upcoming #sf24eu conference:

- Dissecting the Client Hello with #Pyshark (Katherine Leese)
- Advanced #TCP Troubleshooting (@PacketJay)
- Deep Dive Into Traffic Fingerprints using #Wireshark (Luca Deri, Ivan Nardi)

https://t.co/YINrz4IGYg

[WireSharkFest @wiresharkfest]

Here are some agenda highlights from the upcoming #sf24eu conference!

- Capturing WiFi7 (@ikeriri)
- Mastering #Wireshark Filtering (@SYNbit)
- IPsec VPN Analysis & troubleshooting (Jean-Paul Archier)

Join us in Vienna, Austria this fall! (4-8 Nov): https://t.co/YINrz4IGYg

[WireSharkFest @wiresharkfest]

More agenda highlights from the upcoming #sf24us conference!


- Advanced #TCP Troubleshooting (@PacketJay)

- Filters from a novice; Back to the Basics (Kirsten Stoner, Karinne Bessette)

- Enhancing Wi-Fi Networks with AI (Murat Bilgic)


Join us: https://t.co/y6E95Tvh1Y

[WireSharkFest @wiresharkfest]

A new video from the SharkFest archives is out!

Learn the basics of Wireshark & packet capture with packet expert @PacketJay in his "Packet Capture 101" class from SharkFest'22 US.

For more live classes, sign up for #sf24us US!

https://t.co/y6E95Tvh1Y
https://t.co/g8dSqrz5Bd

[Jasper @PacketJay]

@rknall @LauraChappell A few years after writing this blog post I can still say that there's nothing I've seen that is more than a Denial of Service at best (meaning, making Wireshark crash and close) - and I doubt that was really the intention.

Just don't run Wireshark as root. Period. 😅

[Roland Knall @rknall]

It pops up now and then: Why should you not run #Wireshark as Administrator/root. There are quite a few reasons for that, but a very good discussion about this topic has been written quite a while ago by @PacketJay and I just wanted to bring it up again:
https://t.co/ZHT8fmIYLh

[WireSharkFest @wiresharkfest]

Elevate your network analysis game with our Core #Wireshark Skills class! Join @packetpioneer & @Bagurdes for labs & real-world examples that will help you solve network issues & #cybersecurity incidents.

Don't miss out: early bird registration ends 3/29!
https://t.co/y6E95TuJcq

[Jasper @PacketJay]

@rknall @TracketPacer @SYNbit Tracewrangler removes all sensitive details by default, unless you change settings of the anomymization task. So if you run it on your captures with a default task you should be good 😉

[WireSharkFest @wiresharkfest]

Kicking off this year's #sf24us conference are @packetpioneer & @Bagurdes!

Look at real-world examples of how to use #Wireshark to solve network problems & isolate #CyberSecurity incidents. Labs are designed to give real-world experience with protocols

https://t.co/y6E95Tvh1Y

[Jasper @PacketJay]

@petergjones @Arjantim @JensSoeldner @thectoadvisor Absolutely, looking forward to it! Have fun at Cisco Live!

[Peter Wu @Lekensteyn]

Hello #FOSDEM 2024! Hit me up if you want #Wireshark stickers 😁

[Jasper @PacketJay]

@KarstenIwen Correct. It's just that I have an ongoing IR at hospital right now, and they're really vulnerable due to low IT budgets and keep postponing MFA.
Not using MFA is russian roulette by now, for anyone offering remote access, especially when auth'ed against the AD.