Conduct PCAP Analysis with Scapy
In this lab, you’ll practice using the command line tool scapy to process and examine a packet capture file for network activity. When you’re finished, you’ll have the necessary skills and knowledge of how to analyze packet captures, use network tools to identify network activity findings and how this information can be useful.
Terms and conditions apply.
Challenge
Getting Started in the Lab Environment
Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!
Challenge
Network Connection Analysis
In this challenge you will use scapy to examine a packet capture file taken from your organization as part of a security incident. You will learn the techniques to extract and analyze IP address information and port connection details.
Challenge
HTTP Analysis
In this challenge you will use scapy to examine a packet capture file taken from your organization as part of a security incident. You will learn the techniques to extract and analyze web traffic information.
Challenge
DNS Analysis
In this challenge you will use scapy to examine a packet capture file taken from your organization as part of a security incident. You will learn the techniques to extract and analyze DNS information.
Challenge
The Last Challenge
Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Guided walkthrough
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.
Recommended prerequisites
- Basic computer and internet knowledge including some experience of using a command line terminal.
- A need to know some networking fundamentals, like what the 7 layer OSI model and what a packet is.
- Knowledge of basic scripting using python.