Wireshark for Administrators

- What is Wireshark and what is its limitations? - Which protocols are supported and how can they be verified? - Are dumpcap, tshark, tcpdump or pktmon alternatives to Wireshark? - Where in the network should traffic be recorded to get the best result? - Which information can be seen in the expert view? - Why should I use Profiles and Geo-IP to adjust Wireshark for specific requirements? - When should Capture/Daisy filter by temporarily/permanently used? - How can fuzzy filter results be minimised? - Which structures do the filters have and how can they be optimised for your own requirements? - How can I distinguish package delays and losses in the network? - What should be noted during white hat hacking? - How can traffic be optimally mapped using statistical features?