VIDEO: Where in the World Are Your Users? Geolocation with Wireshark

You've probably seen websites that greeted you with something like "Oh, you're in New York City? Here's our local store" or asked to "know your location".  If you've ever wondered how they do that, the answer is IP geolocation.  It's an interesting technique...and you can apply it to your own network capture data in Wireshark!

It's a neat trick; I've known mobile service providers who used it to create a dynamic map of locations they were "currently serving", and I've worked with data center operators who used it to create a dynamic heatmap of transaction loads from different parts of the world.  The best part is that - at least for simple, introductory purposes - you can start working with it for free!

In this video, I'll demonstrate how to enable IP geolocation in Wireshark, export the data in CSV format, and upload it to a mapping provider.  Basically, we'll go from a packet capture to a worldwide contact map in about 12 minutes.

As always - if you enjoy the video, please consider giving it a YouTube like and/or comment!

VIDEO: Decrypting End-User SSL/TLS Browser Sessions with Wireshark

Given that just about everyone is using HTTPS these days (and well they should!), troubleshooting web applications can be a major pain when it comes to network-layer analysis.  Fiddler is a solid tool, but its man-in-the-middle approach to capturing HTTPS sessions doesn't work in many secure environments, thanks to certificate issues.  What if you could just grab the end user's browser sessions and decrypt those?  Well, you can!

In this video, I'll demonstrate how to collect TLS session keys from Firefox/Chrome, import them into Wireshark, and work with the decrypted data.

If you enjoy the video, please consider giving it a like and/or a favorable comment...

Yeah, I'm Making Videos Now...

I finally took the plunge into creating videos.  Basically, I'll be creating short (less than 15 minutes) tutorials on various techniques I've developed in working with data networking and troubleshooting.

The videos are posted on IBM Collaboration Services' YouTube channel, ICSSupportVideos.

For those interested in such things, I'm using an off-the-shelf Logictech C270 webcam in a completely FOSS (free and open source software) environment:

• Platform: Ubuntu Linux 16.04.4
• Recording: SimpleScreenRecorder 0.3.9
• Network Analysis: Wireshark 2.6.1
• Still Graphics: OpenOffice 4.1.1
• Video Editing: OpenShot 2.4.1

Production values are minimal - I'm just learning this stuff - so be kind in your comments where aesthetics are concerned.  **chuckle**

If there's a particular topic in the networking world which interests you, let me know!