You're reading from Network Protocols for Security Professionals Probe and identify network-based vulnerabilities and safeguard against network protocol breaches

Product type Paperback

Published in Oct 2022

Publisher Packt

ISBN-13 9781789953480

Length 580 pages

Edition 1st Edition

Languages

Python

Tools

Metasploit

Concepts

Network Security

Authors (2):

Deepanshu Khanna

Yoram Orzach

View More author details

Table of Contents (23) Chapters

Preface

1. Part 1: Protecting the Network – Technologies, Protocols, Vulnerabilities, and Tools

2. Chapter 1: Data Centers and the Enterprise Network Architecture and its Components FREE CHAPTER

3. Chapter 2: Network Protocol Structures and Operations

4. Chapter 3: Security Protocols and Their Implementation

5. Chapter 4: Using Network Security Tools, Scripts, and Code

6. Chapter 5: Finding Protocol Vulnerabilities

7. Part 2: Network, Network Devices, and Traffic Analysis-Based Attacks

8. Chapter 6: Finding Network-Based Attacks

9. Chapter 7: Detecting Device-Based Attacks

10. Chapter 8: Network Traffic Analysis and Eavesdropping

11. Chapter 9: Using Behavior Analysis and Anomaly Detection

12. Part 3: Network Protocols – How to Attack and How to Protect

13. Chapter 10: Discovering LAN, IP, and TCP/UDP-Based Attacks

14. Chapter 11: Implementing Wireless Network Security

15. Chapter 12: Attacking Routing Protocols

16. Chapter 13: DNS Security

17. Chapter 14: Securing Web and Email Services

18. Chapter 15: Enterprise Applications Security – Databases and Filesystems

19. Chapter 16: IP Telephony and Collaboration Services Security

20. Assessments

21. Index

Why subscribe?

22. Other Books You May Enjoy

Collection and monitoring methods

Viewing network traffic can be done in several ways, such as the following:

Simple Network Management Protocol (SNMP)
NetFlow and IP Flow Information Export (IPFIX)
Wireshark and network analysis tools
Streaming telemetry

Let's look at the information we can get from each one of them.

SNMP

Although considered by some as obsolete, SNMP is still by far the most popular network management tool. SNMP is based on a manager-agent model, where a management system (a manager in SNMP terminology) monitors devices by receiving information from the SNMP agent interacting with the communications device.

There are two ways that the SNMP manager (the management system) receives information from the agent, outlined as follows:

SNMP polling: This refers to when the SNMP manager monitors the agents on communication devices.
SNMP traps: This refers to when an agent on a communication device discovers a problem, and...

The rest of the chapter is locked

You're reading from Network Protocols for Security Professionals Probe and identify network-based vulnerabilities and safeguard against network protocol breaches

Table of Contents (23) Chapters

Collection and monitoring methods

SNMP

Unlock this book and the full library FREE for 7 days

Authors (2)

Personalised recommendations for you