SharkFest'25 EUROPE

Analysis of low level protocols
11-05, 10:15–11:15 (Europe/Warsaw), Room A

With this session we intend to analyse and troubleshoot unobstrusive but essential protocols like ARP, Spanning Tree, ICMP v4 and ICMPv6, ...


In this session we will focus on some protocols not always well-known but very useful and even indispensable. We will mainly cover ARP, ICMP, DHCP, Spanning Tree and VRRP. We will see how Wireshark can help us to analyze and troubleshoot such protocols. It can also be useful to detect some hostile actions like spoofing and poisoning with some examples involving ARP, Neighbor discovery, DHCP.

Jean-Paul has been working as a System and Network Engineer for 40 years. Since 2010, he runs his own company and is mainly focused on network training and consultancy. He is the author of several books for the French publisher ENI: VPN, IPv6, Cisco ASA, Postfix. He was also recently asked by the French company Techniques de l’Ingénieur to write several articles about VPNs for their Encyclopedia. He regularly gives training sessions on Wireshark and other network-related topics. As a certified trainer, he also delivers training about VPNs and network security for WatchGuard resellers and clients