Head of Incident Response @gdata_adan. Creator of TraceWrangler. Member of the Board of Directors of the #Wireshark Foundation. My thoughts are my own.

Düsseldorf, Germany
Joined April 2013
Starting a series of tips & tricks for #Wireshark in anticipation of #CLUS and #SF19US. So here we go: Wireshark May 2019 Tip #01: you can use the F7/F8 function keys to scroll through the packet list even if the focus is in the decode or packet bytes pane. #wiresharktips #dfir
4
46
2
127
If you missed the webinar, here is the video recording for "Decrypting RDP Traffic in Wireshark"! The slides are great, but the one-hour presentation is even better: youtube.com/watch?v=VUHucXiM…
1
9
2
58
4,402
Tune in for the Live Delegate Roundtable at Security Field Day 12 to kick of the event! @TechFieldDay #XFD12 buff.ly/3QsMJQA
3
1
3
481
Check out more agenda highlights from the upcoming #sf24eu #Wireshark Dev & User conference: - Beyond Network Latency: Chasing it up the Stack(Josh Clark) - Kerberos Deep Dive(Eddi Blenkers) - Passive Fingerprinting Methods for #IoT Profiling(Asaf Fried) sharkfest.wireshark.org/sfeu
4
9
510
Don’t miss your chance to join the industry's best @ SharkFest'24 EUROPE—register to get a spot at the ultimate #Wireshark event. Level up your network analysis skills w/ expert-led sessions & hands-on labs that will transform your approach to networking! sharkfest.wireshark.org/sfeu
2
2
382
More agenda highlights from the upcoming #sf24eu conference: - Dissecting the Client Hello with #Pyshark (Katherine Leese) - Advanced #TCP Troubleshooting (@PacketJay) - Deep Dive Into Traffic Fingerprints using #Wireshark (Luca Deri, Ivan Nardi) sharkfest.wireshark.org/sfeu
6
10
1,493
Here are some agenda highlights from the upcoming #sf24eu conference! - Capturing WiFi7 (@ikeriri) - Mastering #Wireshark Filtering (@SYNbit) - IPsec VPN Analysis & troubleshooting (Jean-Paul Archier) Join us in Vienna, Austria this fall! (4-8 Nov): sharkfest.wireshark.org/sfeu
7
1
14
1,652
More agenda highlights from the upcoming #sf24us conference! 
- Advanced #TCP Troubleshooting (@PacketJay) 
- Filters from a novice; Back to the Basics (Kirsten Stoner, Karinne Bessette) 
- Enhancing Wi-Fi Networks with AI (Murat Bilgic)
 Join us: sharkfest.wireshark.org/sfus
3
8
875
A new video from the SharkFest archives is out! Learn the basics of Wireshark & packet capture with packet expert @PacketJay in his "Packet Capture 101" class from SharkFest'22 US. For more live classes, sign up for #sf24us US! sharkfest.wireshark.org/sfus youtu.be/rWHWOat5_Xg
1
7
11
1,078
It pops up now and then: Why should you not run #Wireshark as Administrator/root. There are quite a few reasons for that, but a very good discussion about this topic has been written quite a while ago by @PacketJay and I just wanted to bring it up again: blog.packet-foo.com/2018/09/…
2
7
19
2,848
Elevate your network analysis game with our Core #Wireshark Skills class! Join @packetpioneer & @Bagurdes for labs & real-world examples that will help you solve network issues & #cybersecurity incidents. Don't miss out: early bird registration ends 3/29! sharkfest.wireshark.org/sfus
6
14
1,477
Kicking off this year's #sf24us conference are @packetpioneer & @Bagurdes! Look at real-world examples of how to use #Wireshark to solve network problems & isolate #CyberSecurity incidents. Labs are designed to give real-world experience with protocols sharkfest.wireshark.org/sfus
8
21
1,513
Hello #FOSDEM 2024! Hit me up if you want #Wireshark stickers 😁
4
12
1,478
To all the IT staff at #hospitals out there: do me (and more than that, yourself) a favor and put mandatory MFA on your VPNs *now*. If you think that's expensive there is something even more expensive in orders of magnitude: #ransomware guys using your VPN to encrypt you. #DFIR
2
5
1
25
2,001
Join us for #sf24us! Embark on a journey of networking excellence at the ultimate #Wireshark developer & user conference. Join us for cutting-edge insights, hands-on experiences & networking opportunities, elevating your expertise in network analysis sharkfest.wireshark.org/sfus
6
11
918
We are excited to announce that #SharkFest'24 US will be coming back to the east coast this year! Join us June 15-20 in Fairfax, Virginia for the official #Wireshark developer & user conference Find out more & sign up: sharkfest.wireshark.org/ #Wireshark #PCAP #sf24us
1
16
3
20
4,276
Or to put it into another argument: A span port will show you what it will let you see and what you might have unknowingly configured, a TAP will show you what you want to see. Especially if you want to play around with physics layer staff, TAPs are the only way to go.
We often need a closer look at the packets to find out what’s happening on the network. When it comes to 𝗧𝗔𝗣 𝘃𝘀 𝗦𝗣𝗔𝗡, there are substantial differences that you should know about. Read out blog for more information: hubs.la/Q02fZV0j0
1
2
9
1,007
Video: Hunting for Cobalt Strike in PCAP netresec.com/?b=2410f02
35
2
99
10,488
#Wireshark 4.2.2 has been released. If you're running versions 4.2.0 or 4.2.1 on Windows you'll have to download and install it by hand. Sorry about that. wireshark.org/docs/relnotes/…
4
41
4
102
12,141