Getting startedĭeploy an EC2 instance running Amazon Linux 2, connected directly to an Internet Gateway. Additionally, we will dive into the workings of network protocol encapsulation, one of the core principles of networking. The goal of this exercise is to get you familliar with Tcpdump and Wireshark, which are essential tools in network engineering. Then we will download the file and analyze it with Wireshark. On the instance, we will run Tcpdump to capture some network traffic and store it in a PCAP (packet capture) file. It will be directly connected to an Internet Gateway. In this exercise we will set up a simple EC2 instance with Amazon Linux. The exercises are built on the assumption that you’re already familiar with the AWS basics and have achieved at least one associate level AWS certification.

For an explanation and overview of all exercises, see the overview post. This is exercise 2.2 for the AWS Advanced Networking Specialty training. In this exercise we will capture network traffic with Tcpdump, analyze it with Wireshark and discuss encapsulation in network protocols.

Tcpdump wireshark pcap format