Analyze a Bot Infected Host with Wireshark

Laura Chappell, Founder of Wireshark University and host of the Chappell SeminarSeries, analyzes the unique communications to/from a bot-infected host, reassembles an IRC communication over a non-standard port, identifies what bot is on the infected host and shows you how to make a 'butt-ugly color filter' to help spot unusual DNS replies.

Tags: wireshark, security, bot-infected

We hate these ADs as much as you do! Help us stay FREE and CLEAN by making a Generous Donation!

Ms. Laura Chappell has been trusted by organizations that include the FBI, the US Navy, IBM, HP, Cisco Systems and Microsoft. Her presentations at Novell's BrainShare, HP's Enterprise Technical Symposium, and Microsoft's TechEd are consistently the most highly attended and rated sessions.

Laura Chappell "lives, eats and breathes" at the packet-level. She has written and edited numerous books on networking communications and analysis that are distributed through Podbooks (www.Podbooks.com), Cisco Press, Novell Press, Macmillian Technical Publishing, and Course Technology.

Her ability to effectively train a company’s IT and IS teams has resulted in millions of dollars of savings for many Fortune 100 companies as well as local, national and international law enforcement and government institutions. Ms. Chappell provides onsite analysis services and training through the Protocol Analysis Institute.