OT Cyber Weekly - Think Wireshark is Just for IT How We Use It In OT

OT Cyber Weekly - Think Wireshark is Just for IT How We Use It In OT

by Mike Holcomb

Applied Sciences & Engineering Computing & Cybersecurity UTComputer networking and communicationsUTPNetworking standards and protocols
🎙 Mike Holcomb 👥 27K 📅 May 13, 2026 ⏱ 65 min 👁 596 📄 tutorial 🧭 2026-08-16
Available in: English (current) Français

Keywords

WiresharkOTICSModbuspacket capture

Summary

In this episode of OT Cyber Weekly, Mike Holcomb discusses the use of Wireshark in industrial control system (ICS) environments. He begins by highlighting recent news, including an AI-assisted attack on a water treatment facility in Mexico and a CISA advisory about preparedness. The main segment focuses on Wireshark, a free network protocol analyzer, and its importance in OT security. Mike explains the basics of Wireshark, including its interface, the concept of the five-tuple (source/destination IP, ports, and protocol), and how to apply filters. He demonstrates using publicly available packet captures, particularly for Modbus, the most common industrial protocol. He emphasizes the value of Wireshark for both troubleshooting and security monitoring, and encourages viewers to practice with free captures. The session is practical, aimed at both IT and OT professionals, and includes live Q&A.

134 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable practical knowledge on using Wireshark in OT environments, a topic often overlooked. The argumentation is based on the presenter’s experience and real-world examples, such as the AI-assisted attack, which underscores the relevance of the topic. The reasoning is clear and logical, guiding viewers from basic concepts to practical application. However, the argumentation could be strengthened by citing specific sources or studies to support claims about attacker behavior and tool usage.

83 words

Title / Content Match

The title accurately reflects the content, which focuses on using Wireshark in OT environments.

Quality & Reliability

7/10

The video provides a practical tutorial on using Wireshark for OT/ICS cybersecurity, with clear explanations and references to real-world incidents. However, it lacks formal citations and relies on anecdotal evidence and personal experience.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

Contribution & Novelties

The video provides a practical, hands-on introduction to using Wireshark specifically for OT/ICS environments, which is a niche but critical skill. It bridges the gap between IT and OT by demonstrating how a common IT tool can be applied to industrial networks. The emphasis on free packet captures and community resources adds value for learners.

Pour aller plus loin :

  • Wireshark official documentation — Official guides and references.
  • Modbus protocol specification — Detailed protocol documentation.
  • SANS ICS resources — Training and resources for ICS security.

85 words

Radar Profile

The radar profile shows a balanced distribution across the four dimensions, with slightly higher scores in information quantity and quality, reflecting the video's practical content. The technical level is moderate, suitable for a broad audience, and the overall reliability is good but not exceptional due to the lack of formal citations.

Reliability 6/10

💬 Sur les 0 commentaires analysés, aucune tendance n'a pu être dégagée.