Where is an attacker coming from? Using wireshark and GeoIP databases, we can map out IP locations (unless they are spoofed of course) to a browser with a click of a button. How? First - you have to register and download the GeoIP Lite Databases (Free): https://dev.maxmind.com/geoip/geolite2-free-geolocation-data?lang=en Then, point Wireshark to the databases, look up endpoints, then toss them out to a map. Boom! You're done. Like this video? Then show it! Please smash like and share it with all your IT buddies. That really helps me out. Other links n' stuff: == More On-Demand Training from Chris == ▶Getting Started with Wireshark - https://bit.ly/udemywireshark ▶Getting Started with Nmap - https://bit.ly/udemynmap == Live Wireshark Training == ▶TCP/IP Deep Dive Analysis with Wireshark - https://bit.ly/virtualwireshark == Private Wireshark Training == Let's get in touch - https://packetpioneer.com/product/private-virtual-classroom/ Special thanks to my cat, Pepé for his video-bomb!