Azure Wireshark Network Analysis Lab: Hands-on Network Traffic Monitoring

Azure-Wireshark-Network-Lab

A hands-on lab designed to observe network traffic protocols to and from Azure Virtual Machines (VMs) using Wireshark, while experimenting with Network Security Groups (NSGs) for enhanced understanding of cloud network security and traffic analysis.

---

Environments and Technologies Used

• Microsoft Azure: Virtual Machines (Windows 10 Pro, Ubuntu, Windows 11)
• Remote Desktop Protocol (RDP)
• Command-Line Tools
• Network Protocols: SSH, RDP, DNS, HTTP/S, ICMP
• Wireshark: Protocol Analyzer

---

Lab Setup

Step 1: Set Up Azure Virtual Machines

1. Create Virtual Machines:
   • Windows 10 Pro
   • Ubuntu
   • Windows 11
2. Configure Network Settings:
   • Assign static IPs if needed.
   • Create and configure Network Security Groups (NSGs).

Step 2: Install Necessary Tools

1. On Windows VMs:
   • Install Wireshark.
   • Install necessary command-line tools (e.g., PowerShell, Command Prompt).
2. On Ubuntu VMs:
   • Install and configure network utilities (e.g., ping).

Step 3: Configure Remote Access

1. Enable Remote Desktop:
   • Ensure RDP is active on all Windows VMs.
2. Set Up SSH for Ubuntu:
   • Configure SSH access for secure connectivity.

---

Experimentation and Observations

Step 4: Capture Network Traffic

1. Use Wireshark:
   • Launch Wireshark and start capturing traffic on each VM.
2. Generate Traffic:
   • Use various protocols to create network activity: SSH, RDP, DNS, HTTP/S, ICMP.
3. Analyze Captured Traffic:
   • Observe and analyze traffic patterns in Wireshark.
   • Document findings for future reference.

Step 5: Experiment with Network Security Groups (NSGs)

1. Configure NSGs:
   • Create rules to allow or deny specific traffic types.
   • Test different configurations by applying rules and observing their impact.
2. Test Traffic:
   • Verify connectivity and behavior under different NSG rules.
   • Analyze how traffic is blocked or allowed based on the configurations.

---

Summary

This lab successfully met its objectives of:

• Capturing and analyzing network traffic using Wireshark.
• Experimenting with NSG configurations to secure and manage network traffic in Azure.

Key Takeaways:

1. Practical Skills: Enhanced understanding of network protocols and traffic analysis in a cloud environment.
2. Hands-On Experience: Gained insights into setting up secure network configurations using NSGs.
3. Documentation: Created a reference guide for future projects and learning.

The lab highlights the importance of network traffic analysis and security configurations in maintaining secure and efficient cloud-based environments.

---

References

• Wireshark Documentation
• Microsoft Azure Documentation