2.0 -//Pentabarf//Schedule//EN PUBLISH RHMSGK@@conference.wireshark.org -RHMSGK Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class) en en 20250614T090000 20250614T170000 080000

Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class)

Topics Covered: Introduction to network analysis and the role of Wireshark Installing and configuring Wireshark Analyzing captured packets, understanding protocol structures, and identifying network issues Utilizing powerful filtering techniques to isolate specific traffic and find the packets that matter Deep Dive into ARP, IP, ICMP, DNS, DHCP, TCP, UDP, QUIC, HTTP, TLS, and much more! Working with command-line tools like TShark PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-us-2024/talk/RHMSGK/ Grand Ballroom Salon E Chris Greer Ross Bagurdes PUBLISH RHMSGK@@conference.wireshark.org -RHMSGK Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class) en en 20250615T090000 20250615T170000 080000

Pre-conference class I: Essential Wireshark Skills: Practical Packet Analysis (2-day class)

Topics Covered: Introduction to network analysis and the role of Wireshark Installing and configuring Wireshark Analyzing captured packets, understanding protocol structures, and identifying network issues Utilizing powerful filtering techniques to isolate specific traffic and find the packets that matter Deep Dive into ARP, IP, ICMP, DNS, DHCP, TCP, UDP, QUIC, HTTP, TLS, and much more! Working with command-line tools like TShark PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-us-2024/talk/RHMSGK/ Grand Ballroom Salon E Chris Greer Ross Bagurdes PUBLISH 9BUZJY@@conference.wireshark.org -9BUZJY Pre-conference class II: TCP Analysis Masterclass en en 20250616T090000 20250616T170000 080000

Pre-conference class II: TCP Analysis Masterclass

PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-us-2024/talk/9BUZJY/ Grand Ballroom Salon E Jasper Bongertz PUBLISH SVDV8Z@@conference.wireshark.org -SVDV8Z SharkFest'25 US Welcome Dinner & Sponsor Showcase en en 20250616T173000 20250616T203000 030000

SharkFest'25 US Welcome Dinner & Sponsor Showcase

PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-us-2024/talk/SVDV8Z/ Grand Ballroom Salon E PUBLISH L8ZM9P@@conference.wireshark.org -L8ZM9P Pre-conference class III: SSL/TLS Troubleshooting with Wireshark en en 20250616T090000 20250616T170000 080000

Pre-conference class III: SSL/TLS Troubleshooting with Wireshark

PUBLIC CONFIRMED Pre Conference Class https://conference.wireshark.org/sharkfest-25-us-2024/talk/L8ZM9P/ Grand Ballroom Salons A-D Sake Blok PUBLISH UYU7BA@@conference.wireshark.org -UYU7BA Keynote: Things I Love About Wireshark (and maybe a couple of things I don't) en en 20250617T090000 20250617T100000 010000

Keynote: Things I Love About Wireshark (and maybe a couple of things I don't)

PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-us-2024/talk/UYU7BA/ Grand Ballroom Salon E Gerald Combs PUBLISH FKYN93@@conference.wireshark.org -FKYN93 New kid on the block: Stratoshark en en 20250617T101500 20250617T111500 010000

New kid on the block: Stratoshark

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/FKYN93/ Grand Ballroom Salon E Sake Blok PUBLISH MVF9CL@@conference.wireshark.org -MVF9CL Sharkmon - Packet Monitoring using Tshark en en 20250617T113000 20250617T123000 010000

Sharkmon - Packet Monitoring using Tshark

Packet data exists everywhere in the network - in the data center, on assembly lines, in the service cloud, in cars - or in the home office. Wireshark can be used to analyze every protocol with its fields - but billions of network packets (100 Gbps = 134,217,728 bytes/sec) cannot be analyzed manually. For fast and precise trend detection, anomaly recognition, incident alerting and cause-effect understanding, the analysis of all packet data and fields must be automated and in real time. Sharkmon was developed to capture and analyze every wireshark-"known" IT protocol with all defined protocol fields as needed and to keep it available in dashboards for months / years. The combination of deep packet analysis on Wireshark core level and monitoring is unique in the industry. Sharkmon was developed to bridge this gap - between longtime base data and shortime Wireshark data. The data that the users needs is collected and evaluated at the deep Wireshark level. The results are indexed, threshold-checked, aggregated, stored in the database for a long time and can be displayed in clear dashboards and reports. This makes it possible to immediately identify problems and trends - and react precisely. Sharkmon Short list - Network packet data in Pcap format – from anywhere – also distrubuted sources - tens of thousands of PCPA files over long periods of time - Wireshark metrics for automated analysis - parallel data analysis of data from multiple sources / locations - Cloud or on-premise installation - Web application with web dashboards, user sharing enables easy collaboration - hierarchical indexing of metrics, sessions, protocols and technology enables immediate assignment of critical events to the corresponding technologies and details - hierarchical dashboards – top: index value by technology -> down – per second line chart / data table per critical metric / user session - automated reporting and data export PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/MVF9CL/ Grand Ballroom Salon E Andreas Diedrich PUBLISH UPKZY8@@conference.wireshark.org -UPKZY8 Chase the latency en en 20250617T133000 20250617T143000 010000

Chase the latency

In this session, you can learn how to divide latency properly between the client OS/apps, the server OS/apps, and the network side, including reasonable ways to debug latency problems. We can find the root cause of the latency with TCP/UDP analysis TIPS and tricks using Wireshark. PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/UPKZY8/ Grand Ballroom Salon E Megumi Takeshita PUBLISH DE8CQW@@conference.wireshark.org -DE8CQW Wireshark Packet Capture is like Real Estate: Location Matters en en 20250617T144500 20250617T154500 010000

Wireshark Packet Capture is like Real Estate: Location Matters

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/DE8CQW/ Grand Ballroom Salon E George Cragg PUBLISH VZL737@@conference.wireshark.org -VZL737 "I'm exploiting Your IPv4 Network with IPv6" en en 20250617T160000 20250617T170000 010000

"I'm exploiting Your IPv4 Network with IPv6"

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/VZL737/ Grand Ballroom Salon E Jeff Carrell PUBLISH NBJN8M@@conference.wireshark.org -NBJN8M From Power Lines to Packets: Network Troubleshooting in the Power Grid en en 20250617T171500 20250617T181500 010000

From Power Lines to Packets: Network Troubleshooting in the Power Grid

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/NBJN8M/ Grand Ballroom Salon E Daniel Lopez PUBLISH TSVX8C@@conference.wireshark.org -TSVX8C Sponsor Technology Showcase Reception, Treasure Hunt & Dinner en en 20250617T183000 20250617T213000 030000

Sponsor Technology Showcase Reception, Treasure Hunt & Dinner

PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-us-2024/talk/TSVX8C/ Grand Ballroom Salon E PUBLISH K8HXC9@@conference.wireshark.org -K8HXC9 Are You Ready for Post Quantum Encryption? en en 20250617T101500 20250617T111500 010000

Are You Ready for Post Quantum Encryption?

In a TLS handshake, we see the client offer the cipher suites it supports; 1a-asymmetric for key agreement, 1b-asymmetric for signing (Note: only asymmetric algorithms are affected by Shor's algorithm) 2) Symmetric for data encryption (not affected) 3) Hashing for data integrity (not effected) Using Wireshark is my favorite way to see if a client is actually capable of what the vendor claims (~_^) PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/K8HXC9/ Grand Ballroom Salons A-D Larry Greenblatt PUBLISH 3EVGHM@@conference.wireshark.org -3EVGHM Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures en en 20250617T113000 20250617T123000 010000

Talk with Your Packets: AI-Powered Natural Language Interaction with Packet Captures

This will be a mix of slides and live demonstrations as well as Q&A and interactivity with the audience PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/3EVGHM/ Grand Ballroom Salons A-D John Capobianco PUBLISH WDQNXL@@conference.wireshark.org -WDQNXL walk through 3GPP packet flow en en 20250617T133000 20250617T143000 010000

walk through 3GPP packet flow

In this talk we will go over the packet flow when your cell phone acquires a LTE network, and what the packets look like once you are connected. We will also cover how wireshark tools can be used to look at traffic with tunneling protocols used in LTE. PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/WDQNXL/ Grand Ballroom Salons A-D Mark Stout PUBLISH AFUCXC@@conference.wireshark.org -AFUCXC Detecting Evil with Network Traffic Analysis en en 20250617T144500 20250617T170000 021500

Detecting Evil with Network Traffic Analysis

What does badness look like on the wire? How can you recognize a DDoS versus nmap scan vs remote access vs data exfiltration? Understanding network protocols (yes, RFCs!) and being able to extract artifacts from network traffic is essential in many fields - incident response, forensics, security operations - the list goes on. Recognizing the hallmarks of various types of attacks is also key. In this workshop we will walk through custom packet captures to explore examples of various types of attacks. This workshop is designed for a variety of experience levels. We will start with the basics of TCP/IP and review how network traffic flows, then ease into the analysis part. I encourage anyone with an interest to participate. For more advanced students there will be additional questions/challenges to keep you occupied. PUBLIC CONFIRMED Workshop https://conference.wireshark.org/sharkfest-25-us-2024/talk/AFUCXC/ Grand Ballroom Salons A-D Marcelle Lee PUBLISH CWX3JT@@conference.wireshark.org -CWX3JT The Making of the Wireshark Certified Analyst (WCA) Exam en en 20250617T171500 20250617T181500 010000

The Making of the Wireshark Certified Analyst (WCA) Exam

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/CWX3JT/ Grand Ballroom Salons A-D Chris Greer Ross Bagurdes PUBLISH QDHWWZ@@conference.wireshark.org -QDHWWZ Cloud doesn’t have Packets! en en 20250618T084500 20250618T094500 010000

Cloud doesn’t have Packets!

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/QDHWWZ/ Grand Ballroom Salon E Stephen Donnelly PUBLISH PEDGXJ@@conference.wireshark.org -PEDGXJ Building support for an in-house performance engineering team en en 20250618T100000 20250618T110000 010000

Building support for an in-house performance engineering team

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/PEDGXJ/ Grand Ballroom Salon E Tim DeLamatre PUBLISH WEM9ES@@conference.wireshark.org -WEM9ES Vint Cerf Keynote: The Good, the Bad, the Ugly: Internet from 2025 on... en en 20250618T111500 20250618T121500 010000

Vint Cerf Keynote: The Good, the Bad, the Ugly: Internet from 2025 on...

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/WEM9ES/ Grand Ballroom Salon E Vint Cerf PUBLISH A383HZ@@conference.wireshark.org -A383HZ The Packet Doctors are in! Packet trace examinations with the experts en en 20250618T131500 20250618T144500 013000

The Packet Doctors are in! Packet trace examinations with the experts

PUBLIC CONFIRMED Packetdoctors Session https://conference.wireshark.org/sharkfest-25-us-2024/talk/A383HZ/ Grand Ballroom Salon E Chris Greer Ross Bagurdes Sake Blok PUBLISH KDLCBH@@conference.wireshark.org -KDLCBH How do you know Wi-Fi Device is the Problem? en en 20250618T150000 20250618T160000 010000

How do you know Wi-Fi Device is the Problem?

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/KDLCBH/ Grand Ballroom Salon E Eva Santos PUBLISH LZAXYA@@conference.wireshark.org -LZAXYA The Next Gen Network Engineer en en 20250618T161500 20250618T171500 010000

The Next Gen Network Engineer

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/LZAXYA/ Grand Ballroom Salon E Scott Robohn PUBLISH VCD7PX@@conference.wireshark.org -VCD7PX Containerlab - a Modern way to Design, Deploy, and Test Network Labs en en 20250618T173000 20250618T183000 010000

Containerlab - a Modern way to Design, Deploy, and Test Network Labs

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/VCD7PX/ Grand Ballroom Salon E Saju Salahudeen PUBLISH 8YFL7L@@conference.wireshark.org -8YFL7L Sponsor Technology Showcase Reception, esPCAPe Group Packet Challenge and Dinner en en 20250618T183000 20250618T213000 030000

Sponsor Technology Showcase Reception, esPCAPe Group Packet Challenge and Dinner

Sake's esPCAPe Group Packet Challenge is back! PUBLIC CONFIRMED Dinner https://conference.wireshark.org/sharkfest-25-us-2024/talk/8YFL7L/ Grand Ballroom Salon E Sake Blok PUBLISH 8K9FHW@@conference.wireshark.org -8K9FHW Solving Cybersecurity with JA4+ Network Fingerprinting en en 20250618T084500 20250618T094500 010000

Solving Cybersecurity with JA4+ Network Fingerprinting

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/8K9FHW/ Grand Ballroom Salons A-D John Althouse PUBLISH SWZ3VP@@conference.wireshark.org -SWZ3VP Packet Stories en en 20250618T100000 20250618T110000 010000

Packet Stories

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/SWZ3VP/ Grand Ballroom Salons A-D Sake Blok PUBLISH LXN79C@@conference.wireshark.org -LXN79C Tales of a System Call Spelunker - Using sysdig and Stratoshark to examine system internals en en 20250618T150000 20250618T171500 021500

Tales of a System Call Spelunker - Using sysdig and Stratoshark to examine system internals

PUBLIC CONFIRMED Workshop https://conference.wireshark.org/sharkfest-25-us-2024/talk/LXN79C/ Grand Ballroom Salons A-D Josh Clark PUBLISH XMXZMK@@conference.wireshark.org -XMXZMK CyberShark 3001 - Capture and Decrypt Wifi Traffic from any device en en 20250618T173000 20250618T183000 010000

CyberShark 3001 - Capture and Decrypt Wifi Traffic from any device

n this engaging workshop, you'll explore: • Selecting the ideal Raspberry Pi hardware and components. • Choosing the best Raspbian OS versions. • Building proper interface and routing configurations. • Setting up a wireless AP. • Generating and installing certificates. • Setting up a TLS proxy to export session keys. • Connecting devices to capture their traffic. • Limitations of the device and configuration. • Addressing critical security and privacy considerations associated with the device. Walk away with the confidence and knowledge to construct a wireless capture device, granting you the power to decrypt and troubleshoot applications with ease(results may vary) PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/XMXZMK/ Grand Ballroom Salons A-D Ross Bagurdes PUBLISH CSJGR9@@conference.wireshark.org -CSJGR9 SharkBytes en en 20250619T090000 20250619T100000 010000

SharkBytes

SharkBytes are great fun and a highlight of the SharkFest conferences. Each year, attendees offer glimpses into their lives by speaking about a particular interest or hobby (unrelated to Wireshark!) that reveals a side of them that fellow SharkFesters would not otherwise know. If you want to volunteer to present a 5-minute Byte, please send us an email: sharkfest@wireshark.org PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-us-2024/talk/CSJGR9/ Grand Ballroom Salon E PUBLISH UPXCGM@@conference.wireshark.org -UPXCGM pcap-NG, packets, and packet-like objects en en 20250619T101500 20250619T111500 010000

pcap-NG, packets, and packet-like objects

PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/UPXCGM/ Grand Ballroom Salon E Mike Kershaw PUBLISH YBBEH7@@conference.wireshark.org -YBBEH7 Capturing in unusual places en en 20250619T113000 20250619T123000 010000

Capturing in unusual places

Capturing on stuff beyond traditional pure network cables, like: * Google Chrome network logs * Bluetooth * USB PUBLIC CONFIRMED Presentation https://conference.wireshark.org/sharkfest-25-us-2024/talk/YBBEH7/ Grand Ballroom Salon E Roland Knall PUBLISH NXSMZR@@conference.wireshark.org -NXSMZR Lunch, Closing Remarks and Farewell reception en en 20250619T123000 20250619T143000 020000

Lunch, Closing Remarks and Farewell reception

PUBLIC CONFIRMED Organization https://conference.wireshark.org/sharkfest-25-us-2024/talk/NXSMZR/ Grand Ballroom Salon E PUBLISH EKZSBK@@conference.wireshark.org -EKZSBK Wireshark plus Advanced Analytics – Better Together (2 part session) en en 20250619T101500 20250619T123000 021500

Wireshark plus Advanced Analytics – Better Together (2 part session)

Join us for a troubleshooting deep dive into solving a difficult problem occurring within Webex login from 2018, known as the 98% hang condition. We’ll showcase how the partnership of Wireshark and Advanced Analytics can be leveraged to quickly isolate the fault domain. Captures will be provided for use during the session. Session is half presentation and half hands-on lab with Wireshark. PUBLIC CONFIRMED Workshop https://conference.wireshark.org/sharkfest-25-us-2024/talk/EKZSBK/ Grand Ballroom Salons A-D John Pittle