> For the complete documentation index, see [llms.txt](https://wiki.zacheller.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://wiki.zacheller.dev/network-security/untitled.md).

# Malware Traffic Analysis with Wireshark

![Follow a TCP Stream](/files/-M87chIrLUekyE3R4Uiz)

## Traffic Analysis Exercises

{% embed url="<http://www.malware-traffic-analysis.net/training-exercises.html>" %}

## Traffic Analysis Tutorials

{% embed url="<http://www.malware-traffic-analysis.net/tutorials/index.html>" %}

## Wireshark - How to Identify Hosts and Users

{% embed url="<https://unit42.paloaltonetworks.com/using-wireshark-identifying-hosts-and-users>" %}