Complete the Wireshark Column Display Exercise (Links to an external site.)Links to an external site.and provide a screen shot of your re-configured Wireshark user interface. Review both PCAPs within Wireshark and step through the analysis in Situations #1 and #2 to see if your data matches the one provided in the incident report. Complete a 3-5 page reflection (double spaced) for Situation #1 and a 3-5 page reflection (double spaced) for Situation #2. Given these sample incident reports, write about what you learned, what you have questions about, what you researched as part of this review, and anything else you feel is relevant. Later in the course, you will be asked to complete an incident report on a given PCAP but this project is meant to introduce you to the exercise of packet analysis and incident reporting.

ireshark column display link: http://www.malware-traffic-analysis.net/tutorials/wireshark/index.html