Beginner1 module · 60 hours
Networking Basics
Every attack and every defence passes through the network. In this path you will learn the OSI and TCP/IP models and the DNS and HTTP protocols, and analyse real traffic with Wireshark. By the end you will be able to tell normal network behaviour from suspicious activity.

What you will learn
Key topics
TCP/IPOSIDNSHTTPWiresharkTraffic analysis
- 01
Network models
The OSI and TCP/IP layers and how data moves across a network.
- 02
IP addressing and routing
Addressing, subnets, ports and routing fundamentals.
- 03
TCP and UDP
Connection set-up, packet structure and how the transport protocols differ.
- 04
DNS and HTTP
Name resolution, requests and responses, headers and HTTPS.
- 05
Working with Wireshark
Capturing, filtering and reading packets.
- 06
Traffic analysis
Telling normal traffic from suspicious and investigating simple events.
Attack and defence
The attacker’s side
- See how open ports and unneeded services expose a network.
- Check in a lab how data in unencrypted protocols can be read.
- Understand the traces that scans and suspicious requests leave in traffic.
- Learn how DNS and HTTP requests can be abused.
The defender’s side
- Capture traffic with Wireshark and find anomalies.
- Make the case for moving to encrypted protocols.
- Identify unneeded ports and services and recommend closing them.
- Separate suspicious activity from normal in DNS and HTTP logs.
Who it is for
- Beginners who want to start cybersecurity with networking.
- System administrators strengthening their networking knowledge.
- Learners preparing for the Web Security or Defensive Security paths.
By the end
- Explain how data flows through a network, layer by layer.
- Capture and analyse traffic with Wireshark.
- Diagnose DNS and HTTP problems.
- Recognise the signs of suspicious network activity.
Other paths
Capture your first flag today
Create a free account and access 700+ hands-on challenges.


