Lab 4.2: Wireshark TCP/UDP Comparison
LAB - Eye House Tools
Compare TCP and UDP protocols using Wireshark. Analyze connection establishment, reliability mechanisms, and understand when attackers choose each protocol.
TCP Analysis
Three-way handshake, sequence numbers, retransmissions, connection state
UDP Analysis
Connectionless, fast but unreliable, common in streaming and DNS
Lab Objectives
- Analyze TCP three-way handshake (SYN, SYN-ACK, ACK)
- Track TCP sequence and acknowledgment numbers
- Compare TCP vs UDP header structure
- Identify protocol-specific attack patterns
- Use stream following for conversation analysis