How Nmap really works // And how to catch it // Stealth scan vs TCP scan // Wireshark analysis

Chris and I go deep into what Nmap is actually sending onto the network and how you can find those dodgy packets! We then get into a real world Wireshark discussion on how to find stuff in a sea of packets. Chris’s Wireshark course: Chris’s Nmap course: // MENU // 0:00 ▶️ Welcome 2:15 ▶️ What is Nmap? 3:54 ▶️ TCP SYN and TCP connect scans 6:55 ▶️ Wireshark IP Filter 7:42 ▶️ Wireshark TCP Port Filter 7:57 ▶️ Stealth Scan 09:37 ▶️ Why it’s called a stealth scan 11:02 ▶️ Connect() scan 11:50 ▶️ How to identify potential Nmap scans in Wireshark 15:05 ▶️ Wireshark filters to find potential stealth scans 19:08 ▶️ Nmap Port Flag 20:16 ▶️ What makes a TCP connect scan different 22:47 ▶️ What is TCP Conversa