Where teams start
Most Popular Wireshark Certifications
Most teams start with Wireshark Certified Analyst (WCA-101), which refreshes the TCP/IP model before capture and filtering, then assign Advanced Network Understanding with Wireshark for deeper protocol and attack-traffic analysis.
Wireshark
This intermediate Wireshark training is designed for network engineers and SOC analysts who want to sharpen their packet analysis skills. You'll dive into key protocols like TCP, UDP, and DNS, build advanced Wireshark filter techniques, and learn how to identify performance bottlenecks or signs of malicious activity. By the end, you’ll have the hands-on experience and practical skills to confidently analyze real-world network traffic and support faster, more secure network operations.
Erik Choron
Wireshark (WCA) Certification
Master the core skills of packet analysis that set you apart as a Wireshark Certified Analyst. This Wireshark training shows you how to use the world’s most popular packet capture tool to inspect traffic in motion, identify key protocol headers, and pinpoint issues with dynamic filters. Study with virtual labs built by IT pros, and build the hands-on experience you need to pass the WCA-101 exam. Earn your Wireshark Certified Analyst credential as you capture real traffic and troubleshoot Ethernet, IP, TCP, and application-layer problems.
Keith Barker, Lalo Nunez
Recently added
Newest Releases
The latest Wireshark training added to the catalog — new courses land here within a day of publication.
Frequently asked questions about Wireshark training
Common questions IT directors ask when evaluating Wireshark training for their team.
Which roles should an IT Director assign to the Wireshark courses?
Both courses are intermediate and suit network administrators and engineers, IT support and infrastructure staff, and SOC or cybersecurity analysts. WCA-101 opens with a TCP/IP and encapsulation refresh so newer techs can keep pace with senior staff. Advanced Network Understanding with Wireshark assumes basic networking and OSI model knowledge.
Which certification do these courses prepare a team for?
Wireshark Certified Analyst (WCA-101) prepares learners for the WCA-101 exam. CBT Nuggets prepares the learner, and the certification itself is issued by the vendor. Advanced Network Understanding with Wireshark is skills-focused and does not target a specific exam.
How should a Training Manager sequence a team path?
Assign WCA-101 first to build a shared method: capture traffic, apply capture and display filters, and read Ethernet, IP, TCP, and UDP headers. Follow with Advanced Network Understanding with Wireshark, which adds IPv6, ICMP, DNS, SMB and RPC analysis, logical operators, BPF filtering, and spotting attack traffic.
How much time should we plan per learner?
Plan for about 35 hours per learner for WCA-101, across 33 skills that mostly run about an hour each, which fits a weekly study block. Budget additional time for Advanced Network Understanding with Wireshark as the follow-on course.
Do the courses include hands-on packet analysis?
Yes. Learners capture and analyze real network traffic in Wireshark, filter to the packets that matter, and troubleshoot performance issues from protocol data. WCA-101 also covers managing and exporting capture files and using command-line tools for automated capture and analysis.
How can we track team progress and show completion for audits?
Team reporting shows per-learner progress and completion, cohort and group views, and completion exports you can use as audit evidence. It also shows IT Trainerbot usage, including top topics and the training the answers came from.