2.0 -//Pentabarf//Schedule//EN PUBLISH RKPHN8@@conference.wireshark.org -RKPHN8 Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class) en en 20251103T090000 20251103T170000 8.00000

Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class)

Topics Covered: Introduction to network analysis and the role of Wireshark Installing and configuring Wireshark Analyzing captured packets, understanding protocol structures, and identifying network issues Utilizing powerful filtering techniques to isolate specific traffic and find the packets that matter Deep Dive into ARP, IP, ICMP, DNS, DHCP, TCP, UDP, QUIC, HTTP, TLS, and much more! Working with command-line tools like TShark PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-europe-2025/talk/RKPHN8/ Grand Ballroom Salons AB Ross Bagurdes PUBLISH D8UHZY@@conference.wireshark.org -D8UHZY Pre-conference class II: TCP Analysis Masterclass en en 20251103T090000 20251103T170000 8.00000

Pre-conference class II: TCP Analysis Masterclass

PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-europe-2025/talk/D8UHZY/ Grand Ballroom Salons CDE Jasper Bongertz PUBLISH RKPHN8@@conference.wireshark.org -RKPHN8 Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class) en en 20251104T090000 20251104T170000 8.00000

Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class)

Topics Covered: Introduction to network analysis and the role of Wireshark Installing and configuring Wireshark Analyzing captured packets, understanding protocol structures, and identifying network issues Utilizing powerful filtering techniques to isolate specific traffic and find the packets that matter Deep Dive into ARP, IP, ICMP, DNS, DHCP, TCP, UDP, QUIC, HTTP, TLS, and much more! Working with command-line tools like TShark PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-europe-2025/talk/RKPHN8/ Grand Ballroom Salons AB Ross Bagurdes PUBLISH VENMYF@@conference.wireshark.org -VENMYF SharkFest'25 EUROPE Welcome Dinner & Sponsor Showcase en en 20251104T173000 20251104T203000 3.00000

SharkFest'25 EUROPE Welcome Dinner & Sponsor Showcase

SharkFest'25 EUROPE Welcome Dinner & Sponsor Showcase PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-europe-2025/talk/VENMYF/ Grand Ballroom Salons AB PUBLISH MF8XDP@@conference.wireshark.org -MF8XDP Pre-conference class III: SMB Masterclass // Starting at 08:30 en en 20251104T083000 20251104T173000 9.00000

Pre-conference class III: SMB Masterclass // Starting at 08:30

Please note that class will start at 08:30 and end at 17:30. PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-europe-2025/talk/MF8XDP/ Grand Ballroom Salons CDE Eddi Blenkers PUBLISH ULU3WK@@conference.wireshark.org -ULU3WK Keynote: What's New in Wireshark 4.6? en en 20251105T090000 20251105T100000 1.00000

Keynote: What's New in Wireshark 4.6?

PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-europe-2025/talk/ULU3WK/ Grand Ballroom Salons AB PUBLISH QGAT79@@conference.wireshark.org -QGAT79 Introduction to Cloud Packet Capture en en 20251105T101500 20251105T111500 1.00000

Introduction to Cloud Packet Capture

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/QGAT79/ Grand Ballroom Salons AB Stephen Donnelly PUBLISH 87EHWR@@conference.wireshark.org -87EHWR Wireless with Wireshark en en 20251105T113000 20251105T123000 1.00000

Wireless with Wireshark

Wireshark is a tool for analyzing both wireless and wired networks. In this session, Megumi will show you how to find devices on your wireless network. With various scanning tools, we can explore different standards of WiFi networks and Bluetooth using Wireshark. Additionally, tshark and other Wireshark command-line interface (CLI) tools are useful for collecting and summarize device information. Use Wireshark to manage your wireless environment and enhance your wireless security!! PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/87EHWR/ Grand Ballroom Salons AB Megumi Takeshita PUBLISH EUDWFA@@conference.wireshark.org -EUDWFA Bridging the IT/OT Divide: Analyzing Operational Technology Networks with Wireshark en en 20251105T133000 20251105T143000 1.00000

Bridging the IT/OT Divide: Analyzing Operational Technology Networks with Wireshark

Key Takeaways: • Fundamental differences in purpose and design between IT and OT networks (priorities of safety/up-time vs. data-centric goals ). • How OT network traffic is deterministic and cycle-driven rather than ad-hoc, with strict timing requirements  . • Awareness of legacy systems and security challenges in OT (long device lifecycles, rare patches, focus on network segregation over frequent updates  ). • Practical tips for using Wireshark on OT protocols, including recognizing industrial protocol traffic and analyzing communication patterns over time. • Examples of diagnosing OT network issues by examining packet timing and sequence instead of just packet content. By the end of this talk, attendees will have a clear understanding of what makes packet capture and analysis in OT environments unique, and how to leverage Wireshark to troubleshoot and monitor industrial network traffic effectively. Expect to gain insight into a fascinating area where networking meets the physical world, and pick up tips that you can apply when you encounter OT protocols in the wild. PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/EUDWFA/ Grand Ballroom Salons AB Roland Knall PUBLISH P3EFQN@@conference.wireshark.org -P3EFQN Let's use wireshark to better understand Kubernetes en en 20251105T144500 20251105T154500 1.00000

Let's use wireshark to better understand Kubernetes

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/P3EFQN/ Grand Ballroom Salons AB Sergey Guzenkov PUBLISH 3SQLN9@@conference.wireshark.org -3SQLN9 From Full Capture to Criminal Evidence: A Real-World Case of Lawful Interception en en 20251105T160000 20251105T170000 1.00000

From Full Capture to Criminal Evidence: A Real-World Case of Lawful Interception

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/3SQLN9/ Grand Ballroom Salons AB Daniel Spiekermann PUBLISH K3QZUJ@@conference.wireshark.org -K3QZUJ Level up your MPLS skills - A Wireshark-driven approach en en 20251105T171500 20251105T181500 1.00000

Level up your MPLS skills - A Wireshark-driven approach

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/K3QZUJ/ Grand Ballroom Salons AB Pierre Besombes Juan Pablo Azar Ricciardi PUBLISH ANX98U@@conference.wireshark.org -ANX98U Sponsor Technology Showcase Reception & Dinner en en 20251105T183000 20251105T213000 3.00000

Sponsor Technology Showcase Reception & Dinner

PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-europe-2025/talk/ANX98U/ Grand Ballroom Salons AB PUBLISH HUB3MR@@conference.wireshark.org -HUB3MR Packet Stories en en 20251105T101500 20251105T111500 1.00000

Packet Stories

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/HUB3MR/ Grand Ballroom Salons CDE Sake Blok PUBLISH 8UKP7Z@@conference.wireshark.org -8UKP7Z Secure DNS: Attacks and Defenses en en 20251105T113000 20251105T123000 1.00000

Secure DNS: Attacks and Defenses

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/8UKP7Z/ Grand Ballroom Salons CDE Johannes Weber PUBLISH HW7QGN@@conference.wireshark.org -HW7QGN Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures (part 1) en en 20251105T133000 20251105T143000 1.00000

Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures (part 1)

This will be a mix of slides and live demonstrations as well as Q&A and interactivity with the audience PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/HW7QGN/ Grand Ballroom Salons CDE John Capobianco PUBLISH B3QNQ7@@conference.wireshark.org -B3QNQ7 Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures (part 2, Lab) en en 20251105T144500 20251105T170000 2.01500

Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures (part 2, Lab)

A hands on lab that goes with the lecture. People will be using AI and NL to 'talk to their packets' 2 hour lab PUBLIC CONFIRMED Workshop https://conference.wireshark.org/sharkfest-25-europe-2025/talk/B3QNQ7/ Grand Ballroom Salons CDE John Capobianco PUBLISH 7YAQ3C@@conference.wireshark.org -7YAQ3C LTE / 5G packet flow explained en en 20251105T171500 20251105T181500 1.00000

LTE / 5G packet flow explained

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/7YAQ3C/ Grand Ballroom Salons CDE Mark Stout PUBLISH VPBRDM@@conference.wireshark.org -VPBRDM Keynote: Shift the Conversation: Open Source is Free, But Not Free-Free en en 20251106T090000 20251106T094500 0.04500

Keynote: Shift the Conversation: Open Source is Free, But Not Free-Free

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/VPBRDM/ Grand Ballroom Salons AB Kelley Misata PUBLISH NMUBR7@@conference.wireshark.org -NMUBR7 New kid on the block: Stratoshark en en 20251106T101500 20251106T111500 1.00000

New kid on the block: Stratoshark

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/NMUBR7/ Grand Ballroom Salons AB Sake Blok PUBLISH 8N8MES@@conference.wireshark.org -8N8MES Making WebRTC work in times of locked down networks - A hands-on session on how to find out what your favorite Web Conferencing tool really needs en en 20251106T113000 20251106T123000 1.00000

Making WebRTC work in times of locked down networks - A hands-on session on how to find out what your favorite Web Conferencing tool really needs

**We will look at the big players** • Zoom Web • Teams • Google Meet • Webex • GotoWebinar (not big, but what my company does) What do the specs say wrt IPS/Ports/Domains ? What is the (tested) minimum ? **How do we find out what network requirements they really have?** • Run Wireshark capture in unrestricted network to get a first idea • Have browser export TLS keys so you can read the setup messages • Step by step restrict protocols, address ranges, domains to see what still works. • Live demonstration of test setup **Short sidenote:** How WebRTC finds connections - diagrams of the different configurations **Tests** How do they deal with • Explicit Proxies (SNI) • No local DNS / DNS sinkholes • DPI (Fallback from QUIC to force proxies) • Zscaler connections (split routing) • Non corporate VPN solutions (wireguard based) • How many connections are used in total • IP ranges/domains used **What to do if things fail** common workarounds • WebRTC fallbacks • Exclude Signaling from DPI • Open UDP • TURN server to rescue • Faking DNS PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/8N8MES/ Grand Ballroom Salons AB Robert Hess PUBLISH CHKWHN@@conference.wireshark.org -CHKWHN The Packet Doctors are in! Packet trace examinations with the experts en en 20251106T133000 20251106T150000 1.03000

The Packet Doctors are in! Packet trace examinations with the experts

PUBLIC CONFIRMED Packetdoctors Session https://conference.wireshark.org/sharkfest-25-europe-2025/talk/CHKWHN/ Grand Ballroom Salons AB PUBLISH HREGSB@@conference.wireshark.org -HREGSB Wireshark in Action: Empowering Education and Research en en 20251106T151500 20251106T161500 1.00000

Wireshark in Action: Empowering Education and Research

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/HREGSB/ Grand Ballroom Salons AB Tom Cordemans Ville Haapakangas PUBLISH GWBY8A@@conference.wireshark.org -GWBY8A Handcrafted Packets: Build network packets with Scapy en en 20251106T163000 20251106T173000 1.00000

Handcrafted Packets: Build network packets with Scapy

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/GWBY8A/ Grand Ballroom Salons AB Uli Heilmeier PUBLISH DE8KZY@@conference.wireshark.org -DE8KZY HTTP deep dive en en 20251106T174500 20251106T184500 1.00000

HTTP deep dive

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/DE8KZY/ Grand Ballroom Salons AB André Luyer PUBLISH WHU9VP@@conference.wireshark.org -WHU9VP Sponsor Technology Showcase Reception, esPCAPe Group Packet Challenge and Dinner en en 20251106T184500 20251106T214500 3.00000

Sponsor Technology Showcase Reception, esPCAPe Group Packet Challenge and Dinner

Sake's esPCAPe Group Packet Challenge is back! PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-europe-2025/talk/WHU9VP/ Grand Ballroom Salons AB PUBLISH 3LRMGH@@conference.wireshark.org -3LRMGH SMB Masterclass - Outtakes and Lessons Learned en en 20251106T101500 20251106T111500 1.00000

SMB Masterclass - Outtakes and Lessons Learned

The lab environment for the class includes a Windows domain, multiple servers, workstations and applications. The applications were custom-build for this class to show odd behavior from real-world scenarios. This presentation will show, how to go from a user experience ("it's slow"), get around the usual blame ("it's the network") and then identify the root cause. #pcapincluded Please find additional material at https://www.stellar-bluetani.space/sf25eu/ PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/3LRMGH/ Grand Ballroom Salons CDE Eddi Blenkers PUBLISH SSSB3Q@@conference.wireshark.org -SSSB3Q Dissector developer design notes en en 20251106T113000 20251106T123000 1.00000

Dissector developer design notes

As a core developer I get to see a lot of dissector code, in the form of merge requests, during investigation of bugs, or written by myself. While working on this code I often come across designs which are not optimal for the purpose they serve. This may have to do with the use of poor examples, missing insight into how the packet dissection process really works or lack of understanding of the protocols at hand. Either way more knowledge and insight will hopefully help you to create better dissectors. PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/SSSB3Q/ Grand Ballroom Salons CDE Jaap Keuter PUBLISH TUW8JR@@conference.wireshark.org -TUW8JR The Art of Sanitization en en 20251106T151500 20251106T161500 1.00000

The Art of Sanitization

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/TUW8JR/ Grand Ballroom Salons CDE Jasper Bongertz PUBLISH BEGBHS@@conference.wireshark.org -BEGBHS Attacking IPv4 Networks with IPv6: Security Implications of Dual Stack and native IPv6 Support en en 20251106T163000 20251106T173000 1.00000

Attacking IPv4 Networks with IPv6: Security Implications of Dual Stack and native IPv6 Support

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/BEGBHS/ Grand Ballroom Salons CDE Gabor Österreicher Stefan Machherndl PUBLISH 8WPTVX@@conference.wireshark.org -8WPTVX Troubleshooting VoIP | SIP- & RTP-Analysis with Wireshark en en 20251106T174500 20251106T184500 1.00000

Troubleshooting VoIP | SIP- & RTP-Analysis with Wireshark

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/8WPTVX/ Grand Ballroom Salons CDE Benjamin Pfister PUBLISH ENQ77T@@conference.wireshark.org -ENQ77T SharkBytes en en 20251107T090000 20251107T100000 1.00000

SharkBytes

SharkBytes are great fun and a highlight of the SharkFest conferences. Each year, attendees offer glimpses into their lives by speaking about a particular interest or hobby (unrelated to Wireshark!) that reveals a side of them that fellow SharkFesters would not otherwise know. If you want to volunteer to present a 5-minute Byte, please send us an email: sharkfest@wireshark.org PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-europe-2025/talk/ENQ77T/ Grand Ballroom Salons AB PUBLISH NZZFEB@@conference.wireshark.org -NZZFEB May I analyze your network? – Planning and preparing packet captures en en 20251107T101500 20251107T111500 1.00000

May I analyze your network? – Planning and preparing packet captures

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/NZZFEB/ Grand Ballroom Salons AB Matthias Kaiser PUBLISH RKPTXF@@conference.wireshark.org -RKPTXF User-Centered Visual Analysis of PCAP Data en en 20251107T113000 20251107T123000 1.00000

User-Centered Visual Analysis of PCAP Data

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/RKPTXF/ Grand Ballroom Salons AB Dr. Alex Ulmer PUBLISH FCP7CD@@conference.wireshark.org -FCP7CD Lunch, Closing Remarks and Farewell reception en en 20251107T123000 20251107T143000 2.00000

Lunch, Closing Remarks and Farewell reception

PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-europe-2025/talk/FCP7CD/ Grand Ballroom Salons AB PUBLISH 9ACKNM@@conference.wireshark.org -9ACKNM CyberShark 3001 - Capture and Decrypt Wifi Traffic from any device - The Lessons Learned. en en 20251107T101500 20251107T111500 1.00000

CyberShark 3001 - Capture and Decrypt Wifi Traffic from any device - The Lessons Learned.

In this engaging workshop, you'll explore: -Using a Raspberry Pi as a man in the middle to capture and decrypt app data from smart phones and tablets. -How Encryption and Decryption works, in a very simple visual way, so we can understand what the man in the middle proxy is actually doing. -Selecting the right raspberry pi hardware and software. -The lessons learned and why it generally failed. PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/9ACKNM/ Grand Ballroom Salons CDE Ross Bagurdes PUBLISH NTTZDW@@conference.wireshark.org -NTTZDW WTSC election report en en 20251107T113000 20251107T120000 0.03000

WTSC election report

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/NTTZDW/ Grand Ballroom Salons CDE Uli Heilmeier PUBLISH 7KLGGZ@@conference.wireshark.org -7KLGGZ Foundation and WTSC Q&A en en 20251107T120000 20251107T123000 0.03000

Foundation and WTSC Q&A

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-europe-2025/talk/7KLGGZ/ Grand Ballroom Salons CDE