When it comes to packet/application analysis the trickier ones involve multi-tier or multifunction servers.
For example, you might use a web browser to access a server and when you make a query, the webserver will make a database query which might be an external or local server.
To capture the entire transaction will require multiple capture points, good timing and different capture filters.
In this video, I captured from the client and server and I walk through the basics of determining what happens when a client runs a php script.
Comments