This article walks through capturing and dissecting an HTTP request with Wireshark, explaining TCP three‑way handshake, window scaling, SACK options, four‑way termination, and Keep‑Alive mechanisms, and shows how browsers may differ in connection handling.
This article explains TCP fundamentals—including the three‑way handshake, data transmission, and four‑way connection termination—by building a local Python TCP server and client, capturing the traffic with Wireshark, and analyzing each packet in detail.
This article walks through the fundamentals of TCP, explaining its place in the OSI model, the three‑way handshake, window updates, data exchange, and the four‑way termination, while providing complete Python server and client code and Wireshark packet captures to illustrate each step.
This article introduces the OSI model, IP and UDP protocols, explains the structure of IP and UDP packet headers, demonstrates how to create a simple UDP server and client in Python, and shows how to capture and analyze the traffic with Wireshark.
This tutorial explains how to install Wireshark, create a virtual network interface for an iPhone, obtain the device UDID, start the virtual interface, and capture TCP/UDP traffic between the iPhone and IoT hardware, including the use of capture and display filters.
This article explains the essential conditions for TCP communication, details the three‑step handshake and four‑step termination processes with packet‑capture illustrations, and discusses why these sequences ensure reliable connections between a client and a server.
This article introduces Wireshark as a cross‑platform packet capture tool, explains its installation and basic UI, details capture and display filter syntax with examples, and demonstrates how to decrypt and analyze HTTPS traffic by importing SSL key logs.
This guide introduces Wireshark, a powerful open‑source packet capture tool, explains what it can and cannot do, compares it with Fiddler, details its interface, filtering options, OSI layer mapping, and walks through a practical TCP three‑way handshake analysis, helping network engineers and testers master protocol inspection.
Managing network usage without a GUI is crucial for administrators, and this guide reviews ten command‑line Linux tools—such as iftop, vnstat, iptraf, Monitorix, dstat, bwm‑ng, ibmonitor, htop, arpwatch, and Wireshark—that help monitor traffic, diagnose issues, and maintain system performance over SSH.
This tutorial explains the main Wireshark panes, demonstrates how to create and save display and capture filters, outlines common filter expression syntax, and walks through a practical example of capturing and dissecting the three‑way TCP handshake using Wireshark.
Learn how TCP’s three-way handshake and four-way termination work in detail, illustrated with Wireshark packet captures, and understand why each step is necessary through clear explanations and real‑world analogies that demystify network connection establishment and closure.
This article explains why HTTPS is considered secure, how it prevents man‑in‑the‑middle attacks through certificate verification, details the TLS handshake captured with Wireshark, and shows the cryptographic primitives behind RSA, ECDHE and AES, including practical code snippets and the cost of using HTTPS.
This guide introduces Wireshark’s packet capture process, from selecting network interfaces and configuring capture filters to analyzing captured data with display filters, interpreting protocol layers, and performing detailed TCP flow analysis, providing practical examples and filter expressions for effective network troubleshooting and security investigations.
This article shares practical game‑operation case studies using tcpdump and Wireshark, explains the underlying principles, and provides actionable tips for network troubleshooting, Wireshark configuration, tcpdump parameters, filters, and Android capture methods.
When logging into a Linux server via SSH, users may experience a ten‑second pause after entering the username because the server performs a reverse DNS lookup on the client IP, which can be resolved by disabling UseDNS or adding the appropriate PTR record.
This article explains the step‑by‑step process of TLS cipher suite negotiation between browsers and servers, covering browser‑side cipher listing, server‑side configuration, the meaning of cipher names, and how the final suite is selected, with practical Wireshark and PowerShell examples.
This article walks through a real‑time TLS 1.0 handshake captured with Wireshark, explaining client and server hello messages, certificate verification, RSA key exchange, pre‑master and master secret derivation, key block generation, RC4 encryption, and how the encrypted HTTP request and response are finally delivered to the application layer.
