{"permissions":{},"commerce":{"user_subscriptions":null,"subscription_plans":[{"id":234,"image":"https://cdn.filestackcontent.com/YSrnUha1Sna9l92OqDHi","school":5379,"page_body":"

The AND Skills Vault includes a collection of standalone lessons from AND course authors and contributors that will help you improve your forensic and analysis skills. New lessons are added monthly. An active subscription also retains access to any full length courses you've purchased and ensures you will receive course updates for as long as your subscription is active. Start or stop your subscription any time. For full details and an FAQ, see Networkdefense.co.\r\n

","giftable_cycles":"","name":"AND Skills Vault Monthly Subscription","amount":20.0,"plan":{"id":365,"amount":20.0,"interval":5,"trial_period_days":0,"trial_type":5},"resources_count":0,"url":"https://www.networkdefense.io/subscribe/","currency_display":"$20","currency_display_per_month":"$20","currency_display_giftable_cycles":{}},{"id":233,"image":"https://cdn.filestackcontent.com/YSrnUha1Sna9l92OqDHi","school":5379,"page_body":"

","giftable_cycles":"","name":"AND Skills Vault Yearly Subscription","amount":220.0,"plan":{"id":364,"amount":220.0,"interval":10,"trial_period_days":0,"trial_type":5},"resources_count":0,"url":"https://www.networkdefense.io/subscribe/","currency_display":"$220","currency_display_per_month":"$18.33","currency_display_giftable_cycles":{}}],"global_tracking_code":"","conversion_tracking_code":"\r\n<script src="//platform.twitter.com/oct.js" type="text/javascript"></script>\r\n<script type="text/javascript">twttr.conversion.trackPid('nxgvm', { tw_sale_amount: 0, tw_order_quantity: 0 });</script>\r\n<noscript>\r\n<img height="1" width="1" style="display:none;" alt="" src="https://analytics.twitter.com/i/adsct?txn_id=nxgvm&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0" />\r\n<img height="1" width="1" style="display:none;" alt="" src="//t.co/i/adsct?txn_id=nxgvm&p_id=Twitter&tw_sale_amount=0&tw_order_quantity=0" />\r\n</noscript>\r\n\r\n\r\n\r\n\r\n\r\n\r\n<script>\r\n gtag('event', 'conversion', {\r\n 'send_to': 'AW-779065575/jLMdCKTdhI8BEOexvvMC',\r\n 'transaction_id': ''\r\n });\r\n</script>","payment_requires_zip_code":false,"currency_code":"usd"},"media":{"image":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FHPn6zYkRHSqgbWxVJ237%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=crop&ixlib=python-1.1.0&w=500&s=67714604a0a4dd036627a0b24d864157","thumb":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FHPn6zYkRHSqgbWxVJ237%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=crop&h=250&ixlib=python-1.1.0&w=250&s=dd186d13312ece08824791a21b8f85ac","logo":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FVKNMnAbVRN2MnGP7T3el%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=max&h=200&ixlib=python-1.1.0&w=600&s=7c723bb7aae5568e9780e3f7f30305ca","url":"//d1do9mm1n6degf.cloudfront.net/","theme":{"id":283,"name":"Applied Network Defense - 7600","description":"","primary_color":"0d71fb","background_image":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FB8TQJqo9RoOCyIQVKYNa%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=max&ixlib=python-1.1.0&w=1400&s=cb76712ea91191b11d11e186e7c71b3d","heading_font":"","typekit_id":"","custom_css":"","processed_custom_css":"","theme_css_url":null,"typekit_scripts":null,"background_image_blurred_cdn":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FB8TQJqo9RoOCyIQVKYNa%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?balph=40&blend=666666&blur=500&bm=screen&fit=max&fm=jpg&h=250&high=-80&ixlib=python-1.1.0&q=100&w=250&s=cc0e89cbfefc213e7a79ec84bdb9f077","background_overlay":"0,0,0,0","background_type":1,"background_image_raw":"https://cdn.filestackcontent.com/B8TQJqo9RoOCyIQVKYNa","theme_type":50},"pages":[{"id":308,"name":"Courses","order":0,"url":"/p/course-list/","show_in_nav":true,"using_blocks":false,"page_type":10,"template_type":"open","is_live":true}]},"school":{"id":5379,"name":"Applied Network Defense","platform_version":2.2,"url":"https://www.networkdefense.io/","is_ssl_disabled":false,"is_curriculum_licensor":false,"is_curriculum_subscriber":false,"is_activated":true,"is_activated_via_override":false,"resource_licensing_enabled":false,"trial_has_expired":false,"trial_days_remaining":null,"is_curriculum_enabled":true,"has_public_resources":true,"billing_model_display":"PW2","billing_model":10,"website":"","has_certificate":true,"subdomain":"networkdefense","ietf_language_tag":"en-US","short_description":"Affordable, effective, online information security training. Made by analysts, for analysts.","has_consent_description":false},"support":{"has_faqs":false,"support_email":"chris@chrissanders.org","support_phone":"","support_link":"","support_policy":"

Course support is provided by e-mail. Most questions will be answered within 24 hours.

","support_faqs":null},"security":{"terms_of_service":"https://www.networkdefense.io/pages/terms-of-use.html","privacy_policy":"https://www.networkdefense.io/pages/privacy-policy.html","csrf_token":"ZSQoQkRgf5xK2z9HxynfLH1cGOIZ6I7s3oZiXX8AvM7d0QrKMkuyULbfhHpuZlV0","terms_agreement_prompt_override":""},"social":{"twitter_username":"","facebook_username":"","google_plus_username":"","pinterest_username":""},"integrations":{"facebook":null,"filepicker":{"read_policy":"eyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0=","read_signature":"888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34"},"algolia":false,"intercom":{"user_hash":null,"app_id":null,"school_app_id":null,"school_staff_app_id":null,"pathwright_app_id":"5txzvi2k","school_profile":null},"stripe":{"publishable_key":"pk_live_519FnuiJS0AkKge1QE3m8gmgfw8ZrTaMQm65TH1hqecGkb8CtFjnUtdNniNz6X1rIp4p7MIv5T3J3phpIzYcVTlch007NgYwdpy"},"firebase":null,"google_analytics":{"account_id":"G-999PV44WV0","domain_name":"pathwright.com"},"sso":{"pathwright_login_enabled":true,"providers":[],"current_provider":null}},"customizations":{"head_markup":["","\r\n\r\n\r\n\r\n"],"script_markup":["\n\n\n"],"global_tracking_code":""},"pathwright_account":{"is_on_legacy_plan":false,"is_activated":true,"payment_key":"pk_live_1EFaBZz7SRVXYhX7V70P4dhCC2tOEVWu0f6r3WNUvnxmc3lGpxhOlp3CIPzgfFjihpeAG08yyda1lpRhIINEScEPn00qXGNBhT6","subscription":{"id":909,"school":5379,"plan":{"id":72,"name":"Complete + SSO Monthly Plan","image":null,"description":"Complete ($499/month) + SSO ($299/month)","amount":798.0,"fee_per_additional_learner":0.0,"features":{"10-staff-members":true,"offer-multiple-subscription-plans":true,"course-certificates":true,"1-staff-member":true,"start-at-1000-active-learners":true,"friendly-email-support":true,"starts-with-5-staff-members":true,"sell-subscriptions":true,"free-course-design-courses":true,"use-your-own-domain-name":true,"member-created-group-courses":true,"priority-email-support-live-demos":true,"create-unlimited-courses":true,"add-more-members-and-staff":true,"sell-courses-with-commerce":true,"1-cohort-per-course":true,"essential-app-integrations":true,"guided-course-design-courses":true,"priority-email-support":true,"3-cohorts-per-course":true,"Unlimited-cohorts-per-course":true,"1-mentor-group":true,"5-mentor-groups":true,"20-mentor-groups":true,"sign-in-with-apple-or-google":true},"plan_order":3,"plan_color":"","visibility":15,"learners_included":1000,"should_contact_for_pricing":false,"intervals_by_month":[{"interval_id":5,"months":1,"amount_per_cycle":798.0,"amount_per_month":798.0,"discount_percent":0.0,"discounted_amount_per_month":798.0,"discounted_amount_per_cycle":798.0,"discount_per_month":0,"discount_per_cycle":0},{"interval_id":7,"months":6,"amount_per_cycle":4788.0,"amount_per_month":798.0,"discount_percent":0.05,"discounted_amount_per_month":758.0,"discounted_amount_per_cycle":4548.0,"discount_per_month":40,"discount_per_cycle":240},{"interval_id":10,"months":12,"amount_per_cycle":9576.0,"amount_per_month":798.0,"discount_percent":0.1,"discounted_amount_per_month":718.0,"discounted_amount_per_cycle":8616.0,"discount_per_month":80,"discount_per_cycle":960},{"interval_id":20,"months":1,"amount_per_cycle":798.0,"amount_per_month":798.0,"discount_percent":0.0,"discounted_amount_per_month":798.0,"discounted_amount_per_cycle":798.0,"discount_per_month":0,"discount_per_cycle":0}],"scholarships_available":false},"subscription":{"id":34550,"card_last_4":"0324","subscription_plan":{"id":287,"amount":798.0,"interval":5,"trial_period_days":0,"trial_type":null},"is_delinquent":false,"cycle_start_dtime":"2025-06-11T16:03:37-04:00","cycle_end_dtime":"2025-07-11T16:03:37-04:00","canceled_dtime":null,"provider_school_stripe_key":null,"trial_type":null,"trial_end_dtime":null,"paused_until_dtime":null,"is_canceled_at_cycle_end":false,"cancellation_reason":null},"interval":5}},"user":null,"session":{"user":null,"school_membership":null,"csrf_token":"7HqeCjzFXZvbTq8hCeCqKB4zqGRBiZrtbdz8JWQZdG5ERHqkR0JJTFeC1zy6bCf1","is_authenticated":false},"DEBUG":false,"resource":{"id":9113,"name":"Practical Packet Analysis","description":"

It’s easy to fire up Wireshark and capture some packets…but making sense of them is another story. There’s nothing more frustrating than knowing the answers you need lie in a mountain of data that you don’t know how to sift through. That’s why I wrote the first Practical Packet Analysis book a decade ago. That book is now in its third edition, has been translated to several languages, and has sold over 25,000 copies. Now, I’m excited to create an online course based on the book. The Practical Packet Analysis online course is the best way to get hands on visual experience capturing, dissecting, and making sense of packets.

Practical Packet Analysis takes a fundamental approach by exploring the concepts you need to know without all the fluff that is normally associated with learning about network protocols. Everything you’ll learn is something you can directly apply to the job you have, or the job you want. The ability to understand packets is a critical skill for network engineers, system administrators, security analysts, forensic investigators, and programmers alike. This class will help you build those skills through a series of expert-led lectures, scenario-based demonstrations, and hands-on lab exercises.

The Practical Packet Analysis course is perfect for beginners to intermediate analysts, but seasoned pros will probably learn a few useful techniques too. Whether you’ve never capture packets before or you have and you struggle to manipulate them to effectively achieve your goals, this course will help you get over the hump. You'll learn:

How networking works at the packet level.
How to interpret packet data at a fundamental level in hexadecimal or binary.
Basic and advanced analysis features of Wireshark.
How to analyze packets on the command line with tshark and tcpdump.
Reducing capture files with Berkeley packet filters and Wireshark display filters.
Techniques for capturing packets to make sure you’re collecting the right data.
How to interpret common network and transport layer protocols like IPv4, IPv6, ICMP, TCP, and UDP.
How to interpret common application layer protocols like HTTP, DNS, SMTP, and more.
Normal and abnormal stimulus and response patterns for common protocols.
Troubleshooting connectivity issues at the packet level.
Techniques for carving files from packet streams.
Understanding network latency and how to locate the source.
How common network attacks are seen by an intrusion detection systems.
Techniques for investigating security alerts using packet data.
How malware communicates on the network.

Course Format

The Practical Packet Analysis course is delivered completely online using recorded video lectures that you can go through at your convenience. It is modeled like a college course and consists of lectures that overview critical concepts, demonstrations where I walk through packet captures, and lab exercises when you are given packet captures to work through on your own to practice the concepts you’ve learned. There is also a a discussion forum where you can ask questions and share tips and tricks with other students. The course includes over 40 hours of video lecture content, and can be completed at whatever pace is comfortable for you.

Prerequisites
This course has no prerequisites, but a basic understanding of networking is helpful. It is delivered in English.

Cost
Introductory pricing for the course is $797 for a single user license. Bulk discounts are available for organizations that want to purchase multiple licenses (please contact me to discuss payment and pricing). A portion of the purchase price will go to support multiple charities including the Rural Technology Fund, the Against Malaria Foundation, and others.

You’ll receive:

\r\n

6 month access to course video lectures and lab exercises
A Certification of Course Completion
Continuing Education Credits (CPEs/CEUs)

You can read more about this course here: http://www.networkdefense.co/courses/packets/

","short_description":"Capturing packets is easy, but making sense of them isn’t. This course will teach you the fundamentals of packet analysis. You’ll learn all about common protocols, how to troubleshoot network issues, and how to investigate security incidents at the packet level.","categories":[{"id":952,"name":"Information Technology","slug":"information-technology","description":null,"order":0,"resources_count":null},{"id":2727,"name":"Computer Security","slug":"computer-security","description":"","order":0,"resources_count":null}],"image":"uploads/course_images/c9113.png","cover_image":"https://cdn.filestackcontent.com/UoksEpZORyiGz8GUXNpQ","thumb":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FUoksEpZORyiGz8GUXNpQ%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?dpr=1&fit=crop&h=232&ixlib=python-1.1.0&w=310&s=670bcadd8e27ca06a161e0f1e7f6d9de","thumb_2x":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FUoksEpZORyiGz8GUXNpQ%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?dpr=2&fit=crop&h=232&ixlib=python-1.1.0&w=310&s=a7d8d7d4b949c085a22242ed4ef36122","icon":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FUoksEpZORyiGz8GUXNpQ%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=crop&h=35&ixlib=python-1.1.0&w=35&s=2c85097443bac68093b79fd0c3eef3ad","background_image":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FvhpH4tNtTlaCrgX9tcXa%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=max&ixlib=python-1.1.0&w=1400&s=ae3b116efa3c180c87680ef5fb3779b4","background_overlay":"0,0,0,0.2","background_image_blurred_cdn":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FvhpH4tNtTlaCrgX9tcXa%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?balph=40&blend=666666&blur=500&bm=screen&fit=max&fm=jpg&h=250&high=-80&ixlib=python-1.1.0&q=100&w=250&s=a63b6beaff14fd44013ccc7175bfc929","background_type":1,"authors":[{"id":771,"display_name":"Chris Sanders","first_name":"Chris","last_name":"Sanders","bio":"","image":"https://pathwright.imgix.net/https%3A%2F%2Fcdn.filestackcontent.com%2Fapi%2Ffile%2FkAgzv1lFSImXS0rKWwnI%3Fsignature%3D888b9ea3eb997a4d59215bfbe2983c636df3c7da0ff8c6f85811ff74c8982e34%26policy%3DeyJjYWxsIjogWyJyZWFkIiwgInN0YXQiLCAiY29udmVydCJdLCAiZXhwaXJ5IjogNDYyMDM3NzAzMX0%253D?fit=crop&h=115&ixlib=python-1.1.0&w=115&s=7ccff03184cbdcf9f037faeaa7e16c35","resources_count":null,"salutation":"","title":"CEO at Applied Network Defense","slug":"chris-sanders","order":0,"avatar":"https://cdn.filestackcontent.com/kAgzv1lFSImXS0rKWwnI"}],"created":"2015-04-08T08:37:06.244940-04:00","url":"https://www.networkdefense.io/library/practical-packet-analysis-9113/","offering_counts":{},"resource_type":10,"resource_type_display":"Course","slug":"practical-packet-analysis-9113","trailer_embed_code":"","list_order":null,"total_registration_count":550,"sum_registration_count":553,"lowest_public_offering_price":797.0,"highest_public_offering_price":797.0,"curriculum_offering":null,"num_offerings":6,"visibility_level_override":null,"licensing_enabled":false,"license_offerings":[],"licensed_from_resource":null,"certificate_generator_class":"CertificateGenerator","lowest_price_currency_display":"$797","highest_price_currency_display":"$797","discussion_enabled":true,"licensed_from_school":null,"highest_visibility_level":15,"certificate_json":{}},"offering":{"id":56846,"name":"Practical Packet Analysis - Continuous","access_starts":null,"access_ends":null,"enrollment_starts":null,"enrollment_ends":null,"description":"

This course is open for registration and you'll get immediate access once payment is made. You'll receive access to the materials for six months from the start date.

","visibility":15,"price":797.0,"seats":null,"seats_filled":423,"seats_available":-1,"currency_display":"$797","include_in_subscription_plans":[],"include_with_products":[],"is_subscription_only":false,"resource_id":9113,"path_id":1380707,"permissions":{"can_participate":false,"can_access":false,"can_edit":false,"can_edit_resource":false,"can_facilitate":false,"can_view_analytics":false,"can_invite_editor":false,"can_invite_teacher":false,"can_invite_moderator":false,"can_invite_student":false,"can_invite_observer":false},"due_dates_enabled":false,"is_group_offering":false,"step_counts":{},"is_curriculum":false,"url":"/library/practical-packet-analysis-9113/56846/","invite_urls":{},"access":{"is_full":false,"has_registration_ended":false,"has_registration_started":true,"has_access_started":true,"has_access_ended":false},"analytics_visibility":5,"resource_license":null,"discussion_enabled":true,"parent_offering_id":null,"created_by_id":74872,"status":1,"analytics_disabled":false}}

Loading Practical Packet Analysis...