This chapter will help you understand the approach and methodology for analyzing application layer protocols such as HTTP, SMTP, FTP, and DNS through Wireshark. Application layer protocols typically interfaces between a client and server.
It is critical to understand the structure of application layer protocol packets in order to identify anomalies efficienctly. We will be discussing the following topics in detail throughout this lesson:
- Analysis of common application layer protocols
- Assembling VoIP packets
- Decrypting encrypted traffic