Using Wireshark Exposed NDI Botnet

Описание: We used Wireshark to discover a botnet on NDI devices. Wireshark is a network protocol analyzer tool for understanding what’s really happening on your computer network. With Wireshark, you can capture packets and see exactly what devices on your WiFi or local network are doing, like which servers a smart gadget is contacting, or where unexpected network traffic is going. While testing our technology on a router, Wireshark showed us thousands of connection requests per second overwhelming a router. Using packet capture in Wireshark, we traced the traffic to a compromised NDI Remote program launching a SYN flood attack on the WiFi network. Because Wireshark exposes packet headers, IP addresses, DNS queries, and TCP connections, this software is essential for diagnosing hidden network issues and security threats.

Watch this next:
▶ Our previous discussion on Starlink's Performance & Redundancy Problems... Fixed by Amazon:    • Starlink's Performance & Redundancy Proble...  
▶ Our previous short on The New 5G Standard Connects Your Phone to Space-Based Cell Towers:    • The New 5G Standard Connects Your Phone to...  

Chapters:
00:00 Intro - Wireshark one of the best networking tools
00:38 - What does Wireshark do
00:51 - How Speedify used Wireshark helped solve a customer's tech problem
01:56 - The downfall of NDI Remote
02:41 - Understanding Wireshark's UI
04:27 - Final thoughts on Wireshark

***

SUBSCRIBE to our channel for more tech discussions like this one.

Learn more about Speedify: speedify.com/youtube/

***
Alex Gizis & Speedify devs explain your connectivity and security tech 🛜

You can follow us here:
Instagram:   / speedify  
Tiktok:   / speedifylive  
X: https://x.com/speedify
LinkedIn:   / connectify-me  

#speedify #techtalk #wireshark #networkingtools #networkengineer #informationtechnology