This exercise is one of our challenges to help you learn how to analyze PCAP files

< 1 Hr.
PCAP badge


To get started, you will need to install Wireshark and download the provided PCAP file. This exercise focuses on inspecting a single HTTP request within the PCAP file. By using Wireshark, you'll be able to follow the TCP stream to view the full HTTP request and response. The key information you need can be found in the Set-Cookie header of the server's response, which specifies the cookie that the client will use in subsequent requests.

This challenge not only teaches you how to use Wireshark to dissect network traffic but also provides an understanding of how cookies are set and used in HTTP communications. Cookies are initially set by the server in the response header and then sent by the client in future requests. This exercise complements previous challenges by showing the complete process of cookie handling between a client and server.

Want to learn more? Get started with PentesterLab Pro! GO PRO