This session will cover ways I have used Wireshark to resolve my clients' network and application problems. I don't take advantage of the vast majority of Wireshark's capabilities but I find it a great tool for diagnosing a variety of everyday problems. A simple example is recovering POP3 passwords sent in the clear. Another example is diagnosing communications failures with vendor's applications. A third example would be a case where I captured rogue SMTP traffic and compared the TCP ports to netstat output to determine the offending executable.
Wireshark can provide a clear window into the often murky world of network communications.