Using Wireshark and Netwitness Investigator to Analyze Wireless Traffic

Description

Using Wireshark and Netwitness Investigator to Analyze Wireless Traffic By now you should have finished Sections 1 and 2 of the unit lab and saved your screenshots to a Word document. Overview Security administrators routinely deploy tools to monitor and analyze ingress and egress traffic transiting enterprise networks. Wireshark is one of the most widely used packet capture and analysis tools. It enables the capture of network packet traffic and the capability to save frame details in multiple formats that make them usable by the more sophisticated, more expensive software tools. Directions Consider your lab work and other studies to address each of the following in the Word document that contains your lab screenshots. Clearly label each section. 1.      Describe briefly what you learned or observed in the lab and include it in the section with your screenshots. Be specific. 2.      In the PacketCapture.pcapng file you reviewed in Section 1 of the lab, there is a lot of traffic for the TLSv1 protocol. Explain the primary function of the bulk of the traffic. 3.      In the lab, apply a filter to the HotspotCapture.pcapng file that will display only the packets related to Address Resolution Protocol (ARP). Identify the device used and take a screenshot showing the results of the filtered data and include it in your assignment submission. 4.      Apply the same filter to three other protocols and create a spreadsheet and associated histogram that depicts the volume of traffic for each protocol.   Submission Instructions Submit your assignment in a Word document with well-labeled responses.