Hey, everyone, welcome back to the
course. So in the last video, we
talked about the things we're
covering in this course.
Again, we've got four labs will be
doing hands on.
We'll start off with lab one here
with Wireshark.
Now, as I mentioned before, we're
just kind of taking a high level
overview of Wireshark and TCBY
dump throughout this course just to
get you familiar with some of the
commands and filters.
And we also have a capstone
lab now with the capstone lab.
I will not have a Step-By-Step
Guide. As I mentioned before, we
only have those for the hands on
labs that we're doing the capstone
you'll want to do on your own.
That being said, there are actually
instructions with all of those labs
inside of the whole capstone
project, so to speak, so you
will not be left in the dark.
He will have some walk through.
But we just don't create a separate
guide for you mostly to try
to keep it fair for everyone to
actually get the hands on skills.
Now, if you happen to not be using
the cyber lab environment, you don't
have access to it, then you'll just
want to set up Wireshark TCB
in your own environment, keeping in
mind that any IP addresses we're
using will likely be different than
what you're using. Or at least they
should be, hopefully.
But the commands should be the same
and you shouldn't have any issues
running those commands.
And same thing with the capstone
project.
What you want to do as an alternate,
as basically just practice wireshark
and keep it up a little more in
depth. And I would assign you
probably a good 30 to an hour,
30 minutes to an hour long time
frame of practicing different
commands and Wireshark.
So if you don't have access to the
cyber lab environment, that's kind
of your homework assignment to
finish out as a capstone project,
basically just practicing more and
Wireshark and TCAP on your own.
All right, so as I mentioned here,
we're going to be covering Wireshark
and of course, we're going to cover
Wireshark, TCAP jump in most of our
labs.
But here we're specifically using a
lab called Wireshark inside the
Siberry lab environment.
So all you have to do, everyone
should already be logged into the
cyber website.
If you have access to the cyber lab
environment that all you want to do
is you search for Wireshark in the
search box here and we'll go
ahead and do that. Now you'll see
it's actually going to be this very
top one right here.
And just go ahead and click on that.
Now you're going to see a launch
button right there.
It's going click on it's going to
ask us one more time.
It's going to make us open it
basically a separate window.
So just click on lunch item there
and that will actually go ahead and
launch of that. Now, it takes a few
seconds or so to build it.
I'm going to go ahead and pause the
video and once it pulls it up, I'll
go and start the video again.
All right, so you see, it's pulled
the lab environment for us.
Let's go back to our step by step
guide here. You'll notice that once
it pulls up the environment, all we
want to do is click next to that,
OK, because we want to close this
Pop-Up box here in the background.
So let's go ahead and click next to
that. OK, and that's going to take
us to our Obata desktop screen
here.
Now, I will give you some of these
little alerts here.
You're welcome to read them if you
want to. But again, we have the step
by step guide, and that's what you
should be going off for this
particular lab.
You'll also notice that it didn't
make its log into the Ubuntu.
That's something with this particular
lab environment that if it's using
the Bhuto, in most cases, we don't
have to use a username or password.
So just kind of FYI on that.
So if we go back to our lab document
here, the next step is actually
going to be here in step six, we're
going to be launching a terminal
window. So all we have to do to do
that, just click this little black
box on the left side here.
So the left side menu, sometimes you
have to kind of click around in
there, doesn't launch right away for
some reason.
And eventually it should launch a
terminal for us. There we go.
You notice there I had to click a
few times. You get a go and
hopefully you'll have to look at a
couple of times and it should work
for you. So see the terminal window
here? Obviously, if you use COWEY
Linux, it looks a little different
here in Abuja,
but it's all the same process, so to
speak.
So the next thing we're going to do
if we go to our lab document here,
we're just going to type in pseudo
wireshark and
that is going to prompt us for a
password. Now, since we didn't log
in, you don't know the password, but
the password is going to be the word
student, all lowercase.
So that's the actual password
for the root user inside of
this Ubuntu environment.
So let's go ahead and do that now.
We're going to type in pseudo
wireshark to go ahead and launch it.
So Studio Space Wireshark.
Now, of course, we could just click
the icon on the left side here, but
let's make it a little more difficult
and actually use it for the command
prompt.
So Asuda Wireshark in the news
presenter, it's going to prompt you
for the password again, this the
word student, all lowercase.
You'll notice it doesn't show
anything when I type it, but that's
OK. Just type it in press, enter.
And if Wireshark starts to want you
to get this error message, you know,
you've been successful with entering
that particular password.
All right. So we can ignore this
error message here. And you'll see
that I've noted that here in step
nine of our step by step
guide that we can just go ahead and
ignore that lujah error message.
So we're just going to say, OK, to
that and then we'll see that
Wireshark opens in the background
here for us.
All right, so now we've got here in
step 10, we've got Wireshark has
launched for us.
We're going to go ahead and we could
do a couple of options here.
Step 11, we can either go to the top
here and click capture and then
select options or on your keyboard.
If you want, you can just hold on
the control button and then press
the letter K at the same time and it
will launch the window that we would
pull up the options window.
It would launch that for us.
So I'm going to do the long way.
I'm going to go ahead and sort of
capture and then options for
everyone that wants to follow along
here in the U.S.
But again, you just you can just do
control, OK?
And that will launch the same thing.
So capture and then options.
And if you did control, OK, you will
get the same little pop up here.
All right, let's go back to our lab
document,
so we're basically going to be
setting some different filters here
and running some scans.
So we've got to do paper box opening
here in step 12.
We're going to check the Internet
zero interface.
So we're just going to check the box
to the left of that, make sure
that's checked.
We also want to make sure that using
promiscuous mode on all interfaces,
so that should be checked by
default.
So we just want to make sure that's
actually checked as well.
And you'll see here that I've got
that in step 14 and
now it's up 15, we just want to make
sure that the capture filter
box is empty. So this one right
here, right right below the
promiscuous mode.
And I just checked the box while I
said that Rebelo that this
capture filter box, just make sure
that's empty. And again, it should
be by default.
And so step 16, your next step
under the display options, we just
wanted to make sure that all the
boxes are checked now again,
that's another default thing.
It should be checked in there by
default.
And if I quit clicking around there,
I'll leave and by default there.
So that's what you should look like
as well.
All right, so our next step here is
the next section down there under
the name resolution area here in
step 17.
So we just want to make sure that we
uncheck all these boxes here under
the name resolution.
All right, so the last up here on
this particular window is we're just
going to go ahead and click the start
button at the bottom, right.
So let's go ahead and do that now.
And I keep on checking the box, so
go ahead to start button at the
bottom right there.
All right, so the next thing we want
to do is actually give Wireshark
some packet information or basically
run some information so it can
capture it.
But first things first before we
open a terminal window.
Let's go ahead and kind of move this
screen down a little bit so it's
easier to see everything as we
collect packets.
The way we do that is just cover
your mouse over top here.
You'll notice that my mouse cursor
kind of changes to be an up and down
arrow. Once it does that, go
ahead and just click there with your
left mouse key going
click and hold and then you're just
going to drag it down.
You'll notice when I do that that
right now, since we're not actually
running anything, it's not capturing
any data for us.
You notice we have a couple of lines
here, but what we would normally see
once we're running our capture
is that we'll see this will all
essentially fill up or at least most
of it will fill up with the packets
that we're capturing.
So before we open our terminal, I'm
going to go ahead and pause the
video there, we'll go ahead and pick
this lab back up in the next video.