Further reading
To learn more about what was covered in this chapter, please take a look at the following references:
- Wireshark User's Guide: https://www.wireshark.org/docs/wsug_html_chunked/
- tcpdump man page: https://www.tcpdump.org/manpages/tcpdump.1.html
- SANS (January 2019) TCPIP and tcpdump cheat sheet: https://www.sans.org/security-resources/tcpip.pdf
- Wireshark Display Filters cheat sheet: https://packetlife.net/media/library/13/Wireshark_Display_Filters.pdf
- Green, T. (2012, November 16). Analyzing Network Traffic With Basic Linux Tools: https://www.sans.org/reading-room/whitepapers/protocols/paper/34037
- Cheok, R. (2014, July 3). Wireshark: A Guide to Color My Packets: https://www.sans.org/reading-room/whitepapers/detection/paper/35272
- VandenBrink R (2009, November 18), Using a Cisco Router as a Remote Collector for tcpdump or Wireshark: https://isc.sans.edu/forums/diary/Using+a+Cisco+Router+as+a+Remote+Collector+for+tcpdump +or+Wireshark...