Wireshark: Traffic Analysis

Walkthrough summary

Wireshark: Traffic Analysis TryHackMe walkthrough with 32 answered prompts and lab methodology notes.

Sample prompts covered

• What is the total number of the "TCP Connect" scans?
  Open the walkthrough page to inspect the full answer and command flow.
• Which scan type is used to scan the TCP port 80?
  Open the walkthrough page to inspect the full answer and command flow.
• How many "UDP close port" messages are there?
  Open the walkthrough page to inspect the full answer and command flow.
• Which UDP port in the 55-70 port range is open?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the number of ARP requests crafted by the attacker?
  Open the walkthrough page to inspect the full answer and command flow.