Speak to our team now +44 (0)1737 821590

Advanced TCP/IP

A 5 day
training course
**Due to the current COVID-19 isolation rules all our courses are being delivered via virtual instructor led learning until further notice**

Advanced TCP/IP course description

An intensive advanced TCP/IP course focusing on the details of the protocols according to the RFCs. This course is designed to go into the technical details of the protocols and is not for those that are new to TCP/IP. A particular focus is on TCP and performance. Those more interested in routing protocols should see our Definitive IP routing for engineers course. It is expected that delegates are totally familiar with configuration addressing. Hands on sessions consist of protocol analysis using Wireshark.

Key outcomes from this course

By the end of the course delegates will be able to:
  • Analyse packets and protocols in detail.
  • Troubleshoot networks using Wireshark.
  • Find performance problems using Wireshark.
  • Perform network forensics.

Advanced TCP/IP training course details

Who will benefit:
Advanced technical staff.
TCP/IP foundation for engineers
LINX Accredited Internet Technician 1
5 days

Training approach

This structured training course seeks to build upon workbook learning through the use of group exercises, dynamic discussion and individual tasks in order to deliver an engaging and interactive module that will ensure all candidates are able to transfer their new skills into the workplace.

Overall ratings for this course:

Course review

"Well taught, good pace, content."
P. P. Stemmer Imaging
"Very good trainers - good explainations and good practical examples."
R. R. Stemmer Imaging

Advanced TCP/IP training course contents

Fragmentation and MTU issues, Path MTU discovery, Geolocation, unusual IP addresses, forwarding broadcasts, DiffServ, DSCP, ECN, assured and expedited forwarding. TTL usage in traceroute, Protocol field. Sanitising IP addresses in trace files. Wireshark and checksum errors.
The header. Extension headers. Traffic class and flow labels. Tunnelling. IPv6 and fragmentation.
Requests, responses, gratuitous ARP, Proxy ARP, ARP poisoning.
ping, Round Trip Times, ICMP redirect, ICMP router advertisement and solicitation, Time Exceeded, Destination unreachable. ICMPv6: Similarity to ICMPv4, Neighbor discovery and the replacement of ARP. MLD.
First hop redundancy
ICMP discovery, HSRP, VRRP, GLBP.
Multicast overview, multicast architecture, multicast addresses, IGMP v1, IGMPv2, IGMPv3
Use in broadcasts and multicasts. Port numbers.
Connections, RST, FIN, sequence numbering, packet loss recovery, Fast recovery, RTO timeout, SACK, TCP flow control, receive window, congestion window, van Jacobsen, nagle, delayed ACKs, PSH, URG, TCP options, MSS, Window scaling, TCP timestamps. Congestion notification. Hands on: Troubleshooting with sequence numbers, Wireshark IO and TCP graphs to analyse performance. Window size issues.
DHCP header. Relationship to BOOTP. Discover, offer, request, decline, ACK, release. Lease, renewal and rebind times. Relay agents. DHCPv6
Names and addresses, Resource Records, queries, responses, problems. MDNS
Requests, methods, request modifiers, response codes. HTTPS. SSL, TLS. Proxies. Hands on: Redirects, recreating pages from packets.
Commands, responses, passive/active mode.
SMTP, POP3, IMAP, commands responses.
Voice and Video
RTP, RTCP, SIP. IP PBXs. Traffic flows. Hands on: Voice playback.
MIBs, GET, TRAP, polling.
Baselining, high latency, Wireshark and timings, packet loss, redirections, small packets, congestion, name resolution
Network forensics, scanning and discovery, suspect traffic. IPsec, SSH.

Why Choose Us

SNT trainers score an average of over 90% on the three main areas of:
  • Ability to teach
  • Technical knowledge
  • Answering questions
“Excellently presented by a very knowledgeable and enthusiastic trainer.” P.D. General Dynamics

We limit our maximum class size to 8 delegates; often we have less than this. This ensures optimal interactivity between delegates and instructor.
"Excellent course. The small class size was a great benefit…" M.B. IBM

We write our own courses; courseware does not just consist of slides and our slides are diagrams not bullet point text. A typical chapter provides clearly defined objectives with a chapter overview, slides with text underneath, a quiz at the end to check the learning of the students. Hands on exercises are at the end and are used to reinforce the theory.

See Dates & Prices for this course

To enquire about this course

To reserve this course online